CVE-2025-20072

Name of the Vulnerable Software and Affected Versions Mattermost Mobile versions <= 2.22.0

Description The issue allows an attacker to crash the mobile application via crafted malicious input. This is due to the failure to properly validate the style of proto supplied to an action's style in post.props.attachments.

Recommendations For Mattermost Mobile versions <= 2.22.0, update to a version greater than 2.22.0 to resolve the issue. As a temporary workaround, consider restricting the use of attachments in posts to minimize the risk of exploitation.