Simplex: >> Simplex Chat >> 1.1.1 Security Vulnerabilities
SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere with forward secrecy and can have other impacts if there is a compromise of a single private key. This occurs in the X3DH key exchange for the double ratchet protocol.
CVSS Score
5.3
EPSS Score
0.001
Published
2022-11-12