Threats tagged 'ghsa-w7mj-frmj-5g6g'

Multiple security-critical secrets are hardcoded and shared in Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps up to version 1.8.x. These secrets include API signing material, password-transport keying, and service access keys, which could allow unauthorized access to services. The vulnerability has a high severity score of 8.6 and does not require user interaction for exploitation.