THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-wchh-9x6h-7f6p (medium) — olm dependency deprecation: CVE-2022-39255 and CVE-2024-45193

[GHSA] GHSA-wchh-9x6h-7f6p (medium) — olm dependency deprecation: CVE-2022-39255 and CVE-2024-45193

highgithub_advisoriesPublished 2026-07-29

GHSA-wchh-9x6h-7f6p Severity: medium CVE: None

olm dependency deprecation: CVE-2022-39255 and CVE-2024-45193

### Problem

Multiple vulnerabilities were disclosed in 2024 affecting libolm (Olm): AES timing / side‑channel, Ed25519 signature malleability, and timing leaks in base64 decoding; several CVEs were assigned. Patches and mitigations were published; maintainers recommend upgrading to fixed

MITRE ATT&CK techniques

VulnerabilitiesT1588.006

Indicators of compromise

CVE-2022-39255cve
CVE-2024-45193cve
https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/url

Original source: https://github.com/advisories/GHSA-wchh-9x6h-7f6p