CVE-2020-27853 - CVE House
Back to Database
Status published Critical CVE-2020-27853

Wire before 2020-10-16 allows remote attackers to cause a denial...

Vulnerability Description

Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a format string. This affects Wire AVS (Audio, Video, and Signaling) 5.3 through 6.x before 6.4, the Wire Secure Messenger application before 3.49.918 for Android, and the Wire Secure Messenger application before 3.61 for iOS. This occurs via the value parameter to sdp_media_set_lattr in peerflow/sdp.c.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-27853

Credits & Attribution

No credits recorded in the NVD database.

References

More from wire

View All →
CVE-2022-43673
Wire through 3.22.3993 on Windows advertises deletion of sent messages;...
Unknown 0
CVE-2018-8909
The Wire application before 2018-03-07 for Android allows attackers to...
High 7.5

Affected Vendor

Affected Software

wire, wire - audio\, video\, and signaling, wire secure messenger
Vulnerable Versions:
0, 5.3

Timeline

Official Publish: October 27th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.