Vulnerabilities > CVE-2021-32666 - Unspecified vulnerability in Wire

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

wire

NVD

Published: 2021-06-03

Updated: 2024-11-21

Summary

wire-ios is the iOS version of Wire, an open-source secure messaging app. In wire-ios versions 3.8.0 and prior, a vulnerability exists that can cause a denial of service between users. If a user has an invalid assetID for their profile picture and it contains the " character, it will cause the iOS client to crash. The vulnerability is patched in wire-ios version 3.8.1.

Vulnerable Configurations

Part	Description	Count
Application	Wire Wire Wire 3.23 Wire Wire 3.24 Wire Wire 3.25 Wire Wire 3.26 Wire Wire 3.27 Wire Wire 3.28 Wire Wire 3.29 Wire Wire 3.30 Wire Wire 3.31 Wire Wire 3.34 Wire Wire 3.35 Wire Wire 3.36 Wire Wire 3.37 Wire Wire 3.38 Wire Wire 3.40 Wire Wire 3.41 Wire Wire 3.42 Wire Wire 3.43 Wire Wire 3.44 Wire Wire 3.45 Wire Wire 3.46 Wire Wire 3.47 Wire Wire 3.48 Wire Wire 3.49 Wire Wire 3.50 Wire Wire 3.51 Wire Wire 3.52 Wire Wire 3.53 Wire Wire 3.54 Wire Wire 3.55 Wire Wire 3.56 Wire Wire 3.57 Wire Wire 3.58 Wire Wire 3.59 Wire Wire 3.60 Wire Wire 3.61 Wire Wire 3.62 Wire Wire 3.63 Wire Wire 3.64 Wire Wire 3.65 Wire Wire 3.66 Wire Wire 3.67 Wire Wire 3.68 Wire Wire 3.69 Wire Wire 3.70 Wire Wire 3.71 Wire Wire 3.72 Wire Wire 3.73 Wire Wire 3.74 Wire Wire 3.75 Wire Wire 3.76 Wire Wire 3.77 Wire Wire 3.80	53

Summary

Vulnerable Configurations

References