CVE-2022-31009

CVE-2022-31009 affects the Wire iOS client. The root cause is an unnecessary assert when converting an integer to an enum, causing an exception instead of a default fallback, which can crash the iOS Wire Client on startup. The issue is fixed in the wire-ios repo (commit caa0e27dbe51f9edfda8c7a9f0...

PT-2022-20456

Name of the Vulnerable Software and Affected Versions wire-ios versions prior to 3.100 Description The issue arises from invalid accent colors of Wire communication partners, which can cause the iOS Wire Client to crash multiple times on launch. These invalid accent colors can be sent between Wir...

CVE-2022-31009: Reachable Assertion

wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch. These invalid accent colors can be used by and sent between Wire users. The...

CVE-2022-23625

Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...

Code injection

Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...

CVE-2022-23625

Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...

CVE-2022-23625

Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...

CVE-2022-23625 DoS vulnerability: Malformed Resource Identifiers

Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...

CVE-2022-23625 DoS vulnerability: Malformed Resource Identifiers

Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...

CVE-2022-23625 DoS vulnerability: Malformed Resource Identifiers

Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...

CVE-2022-23625

CVE-2022-23625 affects Wire-ios on Apple iOS prior to version 3.95. Malformed resource identifiers can be generated and sent between Wire users, causing the iOS Wire Client to repeatedly crash on launch (DoS-like impact). The root cause is in the wire-ios-transport component, where code that remo...

PT-2022-16139

Name of the Vulnerable Software and Affected Versions Wire-ios versions prior to 3.95 Description The issue is related to malformed resource identifiers that can cause the iOS Wire Client to crash repeatedly on launch. These identifiers can be sent between Wire users, leading to undesirable...

CVE-2022-23625: Improper Handling of Exceptional Conditions

Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...

Wire-ios 安全漏洞

Wire-ios is a client layer that handles all the data displayed in a mobile application. A security vulnerability exists in Wire-ios, which stems from the fact that in versions prior to 3.95, an incorrectly formatted resource identifier may cause the iOS Wire client to repeatedly crash on startup,...

Secure Encryption Bypass

github.com/wireapp/wire-ios is vulnerable to bypass of secure encryption. Mandatory encryption at rest feature can be pypassed when the device passcode is disabled or is not set. The users will not be aware of inactivation of encryption at rest as the feature is hidden to them...

Unauthorised Account Access

github.com/wireapp/wire-ios is vulnerable to unauthorised account access . Authentication using old but valid access token allows an attacker to get access to the account upon changing the email...

CVE-2021-41093

CVE-2021-41093 concerns Wire, an open-source secure messenger. Affected: Wire iOS components where an attacker with an old but valid access token could takeover the account by changing the user email. Root cause: improper session/token handling that allows account takeover. Impact: high risk (per...

CVE-2021-41093: Improper Authorization

Wire is an open source secure messenger. In affected versions if the an attacker gets an old but valid access token they can take over an account by changing the email. This issue has been resolved in version 3.86 which uses a new endpoint which additionally requires an authentication cookie. See...

CVE-2021-32755 Certificate pinning is not enforced on the web socket connection

Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new...

CVE-2021-32755

Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new...