Matrix Matrix-Android-Sdk2 vulnerabilities

1 known vulnerability affecting matrix/matrix-android-sdk2.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2021-40824MEDIUMCVSS 5.9fixed in 1.2.22021-09-13

CVE-2021-40824 [MEDIUM] CWE-290 CVE-2021-40824: A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-andro A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 allows a malicious Matrix homeserver present in an encrypted room to steal room encryption keys (via crafted Matrix protocol messages) that were originally sent by affected Matrix clients participating