CVE-2024-45193

2024-08-2200:00:00

mitre

github.com

matrix libolm

ed25519

signature malleability

validation criteria

product support

AI Score

6.2

Confidence

High

EPSS

Percentile

16.4%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does not ensure that S < n). This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:matrix:olm:*:*:*:*:*:*:*:*"
    ],
    "vendor": "matrix",
    "product": "olm",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "3.2.16"
      }
    ],
    "defaultStatus": "unknown"
  }
]