CVE-2024-45192

CVE-2024-45192 is a medium-severity vulnerability affecting Matrix libolm versions up to 3.2.16, specifically its implementation of Olm. This flaw allows for cache-timing attacks when decoding group session keys due to the use of base64. The vulnerability has a CVSS score of 5.3, indicating a network attack vector with high attack complexity, requiring low privileges, and potentially leading to high confidentiality impact. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. It is important to note that this vulnerability only impacts products no longer supported by the maintainer.