https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:33:13.590939+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-234396 EUVD-2026-234396 2026-10-03T12:33:13.654243+00:00 EUVD-2026-234396 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41193 fkie_cve-2021-41193 2026-10-03T12:33:13.654280+00:00

wire-avs is the audio visual signaling (AVS) component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are currently no known workarounds.

 https://cve.radiocsirt.org/vuln/ghsa-2j6v-xpf3-xvrv GHSA-2j6v-xpf3-xvrv — Use of Externally-Controlled Format String in wire-avs 2026-10-03T12:33:13.654314+00:00

Affected: Maven: com.wire:avs

### Impact A remote format string vulnerability allowed an attacker to cause a denial of service or possibly execute arbitrary code.

### Patches * The issue has been fixed in wire-avs 7.1.12 and is already included on all Wire products (currently used version is 8.0.x)

### Workarounds * No workaround known

### References * Fixed in commit https://github.com/wireapp/wire-avs/commit/40d373ede795443ae6f2f756e9fb1f4f4ae90bbe

### For more information

If you have any questions or comments about this advisory feel free to email us at [vulnerability-report@wire.com](mailto:vulnerability-report@wire.com)

 https://cve.radiocsirt.org/vuln/gsd-2021-41193 gsd-2021-41193 2026-10-03T12:33:13.654347+00:00 gsd-2021-41193