Buffer Overflow Vulnerability in Matrix libolm Affects Client Operations
CVE-2021-34813

9.8CRITICAL

Key Information:

Vendor: Matrix
Status: Olm
Vendor: CVE Published:; 16 June 2021

What is CVE-2021-34813?

Matrix libolm versions prior to 3.2.3 contain a buffer overflow vulnerability that can allow a malicious Matrix homeserver to crash clients during the retrieval of an Olm encrypted room key backup. The flaw occurs in the olm_pk_decrypt function, and in certain nonstandard build configurations, it may also lead to potential remote code execution.