PT-2026-45830

CVE-2026-35049

Published

2026-06-02

Updated

2026-10-09

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions wire-ios versions prior to 4.16.0

Description The application crashes automatically upon receiving a specially crafted Proteus external message containing an encrypted payload shorter than 16 bytes. This occurs without user interaction. Because the malicious message remains in the conversation, the application enters a crash loop upon relaunching, preventing it from being opened until the local state is wiped.

Recommendations Update to version 4.16.0.

Exploitability

Exploit

Fix

Impacts

Researchers

Franco Belman

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

CWE-191: Integer Underflow (Wrap or Wraparound)