What’s Vulnerable › Vulnerabilities

CVE-2024-45192

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-08-22 · updated 2026-06-17
• Weakness: CWE-385

Description

An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keys. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

• Matrix Olm: through 3.2.16

References

• https://gitlab.matrix.org/matrix-org/olm/
• https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985
• https://news.ycombinator.com/item?id=41249371
• https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/

Get alerted when CVE-2024-45192 or the next vulnerability affects your stack