CVE-2021-41193

CVE-2021-41193 is a critical remote format string vulnerability affecting wire-avs, the audio visual signaling component of the Wire messenger, in versions prior to 7.1.12. This flaw allows an unauthenticated remote attacker to trigger a denial of service or potentially execute arbitrary code with high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions. The issue has been patched in wire-avs version 7.1.12, and no workarounds are currently known.