CVE-2025-45156

Impact

Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users.

Affected products

References

• NVD record
• CVE.org record
• https://carterlasalle.github.io/splashin-cve-2025/splashin-1.pdf