VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Aug 22, 2024· Updated Jun 17, 2026

CVE-2024-45191

CVE-2024-45191

Description

An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes. This is related to software that uses a lookup table for the SubWord step. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Matrix Org/libolmllm-fuzzy2 versions
    <=3.2.16+ 1 more
    • (no CPE)range: <=3.2.16
    • (no CPE)
  • Matrix Org/olm
    cpe:2.3:a:matrix:olm:*:*:*:*:*:*:*:*
    Range: <=3.2.16

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.