All 5 CVE vulnerabilities found in Wire, with AI-generated Chinese analysis, references, and POCs.
Vendor: AsynkronIT
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-61695 | Wire Swift runtime: negative LENGTH_DELIMITED length in skipGroup() crashes any protobuf-decoding service CWE-129 | 7.5 | High | 2026-09-23 |
| CVE-2026-63126 | Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799) CWE-190 | 7.5 | High | 2026-09-16 |
| CVE-2026-45799 | Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service CWE-129 | 7.5 | High | 2026-07-17 |
| CVE-2024-58103 | Square Wire 安全漏洞 CWE-674 | 5.8 | Medium | 2025-03-16 |
| CVE-2021-29508 | Insecure deserialization in Wire CWE-502 | 9.1 | Critical | 2021-05-11 |
All 5 known CVE vulnerabilities affecting Wire with full Chinese analysis, references, and POCs where available.