CVE Vulnerabilities

CVE-2024-36277

Improper Verification of Cryptographic Signature

Published: Jun 17, 2024 | Modified: Jul 03, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Improper verification of cryptographic signature issue exists in FreeFrom - the nostr client App versions prior to 1.3.5 for Android and iOS. The affected app cannot detect event data with invalid signatures.

Weakness

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References