CVE-2024-36277

2024-06-1707:33:55

jpcert

www.cve.org

cryptographic signature verification

freefrom app

android/ios

event data detection

JSON

Improper verification of cryptographic signature issue exists in “FreeFrom - the nostr client” App versions prior to 1.3.5 for Android and iOS. The affected app cannot detect event data with invalid signatures.

CNA Affected

[
  {
    "vendor": "FreeFrom K.K.",
    "product": "\"FreeFrom - the nostr client\" App for Android",
    "versions": [
      {
        "version": "prior to 1.3.5",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FreeFrom K.K.",
    "product": "\"FreeFrom - the nostr client\" App for iOS",
    "versions": [
      {
        "version": "prior to 1.3.5",
        "status": "affected"
      }
    ]
  }
]