PatchTheCVECVE-2022-23625: Wire-ios is a messaging application using the wire protocol on apple's ios platform
CVE-2022-23625 is a medium-severity flaw (CVSS 6.5) affecting wire, wire-ios-transport. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and sent between Wire users. The root cause lies in [wireapp/wire-ios-transport](https://github.com/wireapp/wire-ios-transport), where code responsible for re
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 1.2% (top 31%) |
| CISA exploited list | No |
| Weakness | CWE-755 |
| Published | 2022-03-11 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-23625?
wire: upgrade to 3.95; wire-ios-transport: upgrade to 84.1.1. Exact commands for each OS are on this page.
Is CVE-2022-23625 being exploited?
CVE-2022-23625 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-23625 affect?
CVE-2022-23625 affects wire, wire-ios-transport. Severity is medium (CVSS 6.5). Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. Th
How urgent is CVE-2022-23625?
Priority 40/100. No elevated risk signals yet.
Software pages
GitHub vulnerabilities · iOS vulnerabilities
Related CVEs
- CVE-2026-45799 HIGH 7.5 UPGRADE Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java
- CVE-2023-22737 MEDIUM 6.5 UPGRADE wire-server provides back end services for Wire, a team communication and collaboration platform
- CVE-2022-43673 MEDIUM 4.7 UPGRADE Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retri
- CVE-2022-31009 MEDIUM 5.7 UPGRADE wire-ios is an iOS client for the Wire secure messaging application
- CVE-2021-41094 MEDIUM 4.2 UPGRADE Wire is an open source secure messenger