Impact

A remote format string vulnerability could potentially allow an attacker to cause a denial of service or possibly execute arbitrary code.

Patches

• The issue has been fixed in wire-avs 9.2.22 & 9.3.5 and is already included on all Wire products.

Workarounds

• No workaround known

References

• Fixed in commit 364c332

For more information

If you have any questions or comments about this advisory feel free to email us at vulnerability-report@wire.com