MEDIUM🇬🇧 English

CVE-2025-27606

CVSS 5.1v3.1pub. 2025-03-14upd. 2025-10-16

Element Android is an Android Matrix Client provided by Element. Element Android up to version 1.6.32 can, under certain circumstances, fail to logout the user if they input the wrong PIN more than the configured amount of times. An attacker with physical access to a device can exploit this to guess the PIN. Version 1.6.34 solves the issue.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

  • Element

    APP
    Element
    < 1.6.34
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2024-26131HIGH8.4ten sam produkt

Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to int...

CVE-2024-26132MEDIUM4.0ten sam produkt

Element Android is an Android Matrix Client. A third-party malicious application installed on the same phone c...

CVE-2022-41904MEDIUM6.4ten sam produkt

Element iOS is an iOS Matrix client provided by Element. It is based on MatrixSDK. Prior to version 1.9.7, eve...

CVE-2022-23597HIGH8.3ten sam vendor

Element Desktop is a Matrix client for desktop platforms with Element Web at its core. Element Desktop before ...

CVE-2026-45076MEDIUM5.1ten sam vendor

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious ho...