Medium severity · published Mar 15, 2024
CVE-2024-24975
Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing…
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
Uncontrolled Resource Consumption in Mattermost Mobile versions before 2.13.0 fails to limit the size of the code block that will be processed by the syntax highlighter, allowing an attacker to send a very large code block and crash the mobile app.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Mattermost Mobile · Mattermost
before 2.13.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-24975
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-24975
Vendor Advisory
https://mattermost.com/security-updates
More from Mattermost Mobile
7.5
CVE-2025-30516
Unauthorized Notification Exposure in Mobile App Under Specific Conditions
7.5
CVE-2025-20630
Mobile crash via object that can't be cast to String in Attachment Field
7.5
CVE-2025-20072
Mobile crash via improper validation of proto style in attachments
7.5
CVE-2019-20852
An issue was discovered in Mattermost Mobile Apps before 1.26.0
7.5
CVE-2020-14451
An issue was discovered in Mattermost Mobile Apps before 1.29.0