Lucene search

K
osvGoogleOSV:CVE-2021-34813
HistoryJun 16, 2021 - 6:15 p.m.

CVE-2021-34813

2021-06-1618:15:09
Google
osv.dev
3
matrix libolm
buffer overflow
remote code execution
client crash
encrypted backup

AI Score

7.5

Confidence

Low

EPSS

0.021

Percentile

89.3%

Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room key backup from the homeserver) because olm_pk_decrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build configurations.

AI Score

7.5

Confidence

Low

EPSS

0.021

Percentile

89.3%