Back to Database
Status published
Critical
CVE-2021-34813
Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to...
Vulnerability Description
Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room key backup from the homeserver) because olm_pk_decrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build configurations.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-34813
Credits & Attribution
No credits recorded in the NVD database.
References
More from matrix
View All →CVE-2021-44538
The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable...
Critical
9.8
CVE-2021-40824
A logic error in the room key sharing functionality of...
Medium
5.9
CVE-2021-40823
A logic error in the room key sharing functionality of...
Medium
5.9
CVE-2020-26891
AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS...
Medium
6.1
CVE-2020-26890
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and...
High
7.5
Affected Vendor
matrix
View all reports →Affected Software
olm
Vulnerable Versions:
0
Timeline
Official Publish:
June 16th, 2021
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.