An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keys. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NMatrix Olm
APPMatrix≤ 3.2.16
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2021-44538CRITICAL9.8PL ✓same product
Buffer overflow w Matrix libolm — funkcja olm_session_describe
CVE-2021-34813CRITICAL9.8PL ✓same product
Stack-based buffer overflow w Matrix libolm — RCE przez złośliwy homeserver
CVE-2024-45191MEDIUM5.3same product
An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing ...
CVE-2024-45193MEDIUM4.3same product
An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack o...
CVE-2023-38686CRITICAL9.3PL ✓same vendor
Brak weryfikacji certyfikatu SMTP TLS w Matrix Sydent — podatność MITM