Impact
Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch.
These invalid accent colors can be used by and sent between Wire users.
The root cause was a unnecessary assert statement when converting a integer value into the corresponding enum value.
This assert caused an exception instead of a fallback to a default value.
This causes undesirable behavior, however the (greater) Wire system is still functional.
Patches
- The root cause was fixed in wire-ios
- Wire for iOS 3.100
Workarounds
There is no workaround available, but users may use other Wire clients (such as the web app) to continue using Wire.
Credits
We thank Markus Vervier of X41 for reporting this vulnerability!
Impact
Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch.
These invalid accent colors can be used by and sent between Wire users.
The root cause was a unnecessary assert statement when converting a integer value into the corresponding enum value.
This assert caused an exception instead of a fallback to a default value.
This causes undesirable behavior, however the (greater) Wire system is still functional.
Patches
Workarounds
There is no workaround available, but users may use other Wire clients (such as the web app) to continue using Wire.
Credits
We thank Markus Vervier of X41 for reporting this vulnerability!