CVE-2021-44538

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-44538
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-44538.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-44538
Downstream
Related
Published
2021-12-14T14:15:09Z
Modified
2026-08-19T11:48:26Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted sequence of messages to manipulate the state of the receiver's session in such a way that, for some buffer sizes, a buffer overflow happens on a call to olm_session_describe. Furthermore, safe buffer sizes were undocumented. The overflow content is partially controllable by the attacker and limited to ASCII spaces and digits. The known affected products are Element Web And SchildiChat Web.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "9.0"
                },
                {
                    "last_affected":  "9.0"
                },
                {
                    "introduced":  "10.0"
                },
                {
                    "last_affected":  "10.0"
                },
                {
                    "introduced":  "11.0"
                },
                {
                    "last_affected":  "11.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "debian:debian_linux"
        }
    ]
}
References

Affected packages

Git
github.com/cinnyapp/cinny

Affected ranges

Type
GIT
Repo
https://github.com/cinnyapp/cinny
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
5d380453a4a85728d89b28428600cdc7bfc451e4
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:cinny_project:cinny:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "1.6.0"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

v1.*
v1.0.0
v1.1.0
v1.2.0
v1.5.0
v1.5.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-44538.json"
github.com/element-hq/element-desktop

Affected ranges

Type
GIT
Repo
https://github.com/element-hq/element-desktop
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
6e28c141abfb688d8d5ec8dca8a5033098f6da76
Database specific
Show details 
{
    "cpe":  [
        "cpe:2.3:a:matrix:element:*:*:*:*:desktop:*:*:*",
        "cpe:2.3:a:matrix:element:*:*:*:*:web:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "1.9.7"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

v1.*
v1.7.0
v1.7.1
v1.7.11
v1.7.11-rc.1
v1.7.12
v1.7.13
v1.7.13-rc.1
v1.7.14
v1.7.14-rc.1
v1.7.19
v1.7.19-rc.1
v1.7.2
v1.7.20
v1.7.22
v1.7.22-rc.1
v1.7.23
v1.7.23-rc.1
v1.7.29
v1.7.29-rc.1
v1.7.31
v1.7.31-rc.1
v1.7.32
v1.7.33
v1.7.34
v1.7.5
v1.7.5-rc.1
v1.8.0
v1.8.5
v1.9.0
v1.9.1
v1.9.4
v1.9.5
v1.9.6

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-44538.json"
github.com/element-hq/element-web

Affected ranges

Type
GIT
Repo
https://github.com/element-hq/element-web
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
eae38311b24da6801366780fe889aafe2d892e9f
Database specific
Show details 
{
    "cpe":  [
        "cpe:2.3:a:matrix:element:*:*:*:*:desktop:*:*:*",
        "cpe:2.3:a:matrix:element:*:*:*:*:web:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "1.9.7"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

v0.*
v0.1.2
v0.10.0
v0.10.0-rc.2
v0.12.0-rc.1
v0.12.1
v0.12.1-rc.1
v0.12.2
v0.14.3-rc.1
v0.15.0
v0.15.0-rc.1
v0.15.0-rc.2
v0.15.0-rc.3
v0.15.0-rc.4
v0.15.0-rc.5
v0.15.0-rc.6
v0.15.1
v0.15.4
v0.15.4-rc.1
v0.15.5
v0.15.5-rc.1
v0.16.0
v0.16.0-rc.1
v0.16.0-rc.2
v0.16.3
v0.16.3-rc.1
v0.16.3-rc.2
v0.17.8
v0.17.8-rc.1
v0.3.0
v0.4.0
v0.4.1
v0.5.0
v0.6.0
v0.6.1
v0.7.0
v0.7.1
v0.7.2
v0.7.3
v0.7.4
v0.7.4-r1
v0.7.5
v0.7.5-r1
v0.8.0
v0.8.1
v0.8.2
v0.8.3
v0.9.2
v0.9.3
v1.*
v1.4.0
v1.4.0-rc.1
v1.4.0-rc.2
v1.4.1
v1.4.2
v1.4.2-rc.1
v1.5.10
v1.5.3
v1.7.0
v1.7.1
v1.7.11
v1.7.11-rc.1
v1.7.13
v1.7.13-rc.1
v1.7.14
v1.7.14-rc.1
v1.7.16
v1.7.16-rc.1
v1.7.2
v1.7.23
v1.7.23-rc.1
v1.7.30
v1.7.30-rc.1
v1.7.9
v1.7.9-rc.1
v1.9.5
v1.9.5-rc.1
v1.9.6
v1.9.6-rc.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-44538.json"
github.com/matrix-org/matrix-js-sdk

Affected ranges

Type
GIT
Repo
https://github.com/matrix-org/matrix-js-sdk
Events
Introduced
c874783742f17921830aa274106d65e3e8af903c
Fixed
f4839a3b4f1877111b2e0360a1b3b0dd2047193e
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:matrix:javascript_sdk:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "2.4.2"
        },
        {
            "fixed":  "15.2.1"
        }
    ],
    "source":  "CPE_RANGE"
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-44538.json"
github.com/schildichat/schildichat-desktop

Affected ranges

Type
GIT
Repo
https://github.com/schildichat/schildichat-desktop
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
5aaedf0f19ba337fcc837955eb6171f7c6ebc311
Database specific
Show details 
{
    "cpe":  [
        "cpe:2.3:a:schildi:schildichat:*:*:*:*:desktop:*:*:*",
        "cpe:2.3:a:schildi:schildichat:*:*:*:*:web:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "1.9.7-sc1"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

v1.*
v1.7.12
v1.7.13
v1.7.14
v1.7.15
v1.7.16
v1.7.17-sc1
v1.7.20-sc1
v1.7.22-sc1
v1.7.24-sc1
v1.7.29-sc1
v1.7.32-sc1
v1.7.8
v1.8.4-sc1
v1.8.5-sc1
v1.9.0-sc.1
v1.9.5-sc.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-44538.json"
gitlab.matrix.org/matrix-org/olm

Affected ranges

Type
GIT
Repo
https://gitlab.matrix.org/matrix-org/olm
Events
Introduced
6753595300767dd70150831dbbe6f92d64e75038
Fixed
797183f27f1c8cdb9d4551aaa317bd13ff02401b
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:matrix:olm:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "3.1.4"
        },
        {
            "fixed":  "3.2.8"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

3.*
3.1.4
3.1.5
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-44538.json"