Skip to content
OpenAdvisories

Package · Maven

org.matrix.android:matrix-android-sdk2

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.6
    CVE-2022-39248

    matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion

    matrix-android-sdk2 is the Matrix SDK for Android. Prior to version 1.5.1, an attacker cooperating with a malicious homeserver can construct messages that legitimately appear to have come from another person, without any indication such as a grey shield. Addi…

    Matrix matrix-android-sdk2 org.matrix.android:matrix-android-sdk2 Android Maven
  • High 7.5
    CVE-2022-39246

    matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions

    matrix-android-sdk2 is the Matrix SDK for Android. Prior to version 1.5.1, an attacker cooperating with a malicious homeserver can construct messages appearing to have come from another person. Such messages will be marked with a grey shield on some platforms…

    Matrix matrix-android-sdk2 org.matrix.android:matrix-android-sdk2 Android Maven
  • Medium 5.9
    CVE-2021-40824

    Logic error in Matrix SDK for Android

    A logic error in the room key sharing functionality of Element Android before 1.2.2 and matrix-android-sdk2 (aka Matrix SDK for Android) before 1.2.2 allows a malicious Matrix homeserver present in an encrypted room to steal room encryption keys (via crafted …

    riot-web element-web org.matrix.android:matrix-android-sdk2 Alpine Maven