Critical severity · published Oct 27, 2020
CVE-2020-27853
Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a format string
9.8
CVSS
3.9%
EPSS
No
On KEV
Description
Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a format string. This affects Wire AVS (Audio, Video, and Signaling) 5.3 through 6.x before 6.4, the Wire Secure Messenger application before 3.49.918 for Android, and the Wire Secure Messenger application before 3.61 for iOS. This occurs via the value parameter to sdp_media_set_lattr in peerflow/sdp.c.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Wire · Wire
before 3.21.2936; before 3.21.3932; before 3.21.3959 · source: NVD
WA
Wire - Audio, Video, And Signaling · Wire
5.3 before 6.4 · source: NVD
WS
Wire Secure Messenger · Wire
before 3.49.918; before 3.61 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-27853
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-27853
Exploit
http://github.security.telekom.com/2020/11/wire-secure-messenger-format-string-vulnerability.html
Exploit
https://github.com/wireapp/wire-audio-video-signaling/issues/23#issuecomment-710075689
More from Wire
9.8
CVE-2021-41093
Wire is an open source secure messenger
8.0
CVE-2020-15258
In Wire before 3.20.x, `shell.openExternal` was used without checking the URL
7.5
CVE-2018-8909
The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads directory via a ../ in a filename of a received file, related to…
6.5
CVE-2023-22737
wire-server provides back end services for Wire, a team communication and collaboration platform
6.5
CVE-2022-31009
wire-ios is an iOS client for the Wire secure messaging application