Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-36277 EUVD-2024-36011GHSA-xmvf-wm3q-gh2f

Improper verification of cryptographic signature issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and …

Published Jun 17, 2024 · Updated Aug 2, 2024 · Assigned by jpcert

Description

Improper verification of cryptographic signature issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. The affected app cannot detect event data with invalid signatures.

Affected products

VendorProductAffectedFixed
FreeFrom K.K. "FreeFrom - the nostr client" App for Android prior to 1.3.5 —
FreeFrom K.K. "FreeFrom - the nostr client" App for iOS prior to 1.3.5 —

References