CVE-2025-48930 LOW

CVE-2025-48930

Vendor Telemessage
Product service
Weakness CWE-316
Published May 28, 2025
Last update July 1, 2025

CVSS base score

2.8/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues.

Key dates

02Disclosure timeline

May 28, 2025 CVE published
July 1, 2025 Record updated