Lucene search

K
osvGoogleOSV:GHSA-JJMC-4P83-PP26
HistoryMay 24, 2022 - 7:14 p.m.

Logic error in Matrix SDK for Android

2022-05-2419:14:16
Google
osv.dev
3
logic error
matrix sdk
android
element
room key sharing
identity verification
impersonation
software

EPSS

0.001

Percentile

36.0%

A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 leads to a situation where identity verification is inadequate and thus a key-requesting device can be impersonated.

EPSS

0.001

Percentile

36.0%