PatchTheCVECVE-2022-31009: wire-ios is an iOS client for the Wire secure messaging application
CVE-2022-31009 is a medium-severity flaw (CVSS 5.7) affecting wire. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch. These invalid accent colors can be used by and sent between Wire users. The root cause was an unnecessary assert statement when converting an integer value into the corresponding enum value, causing an exception instead of a fall
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.7 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | Required |
| EPSS exploit chance | 0.7% (top 47%) |
| CISA exploited list | No |
| Weakness | CWE-617 |
| Published | 2022-06-23 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-31009?
wire: upgrade to 3.100. Exact commands for each OS are on this page.
Is CVE-2022-31009 being exploited?
CVE-2022-31009 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-31009 affect?
CVE-2022-31009 affects wire. Severity is medium (CVSS 5.7). wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch. These invalid accen
How urgent is CVE-2022-31009?
Priority 33/100. No elevated risk signals yet.
Software pages
Related CVEs
- CVE-2026-45799 HIGH 7.5 UPGRADE Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java
- CVE-2023-22737 MEDIUM 6.5 UPGRADE wire-server provides back end services for Wire, a team communication and collaboration platform
- CVE-2022-43673 MEDIUM 4.7 UPGRADE Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retri
- CVE-2022-23625 MEDIUM 6.5 UPGRADE UPGRADE Wire-ios is a messaging application using the wire protocol on apple's ios platform
- CVE-2021-41094 MEDIUM 4.2 UPGRADE Wire is an open source secure messenger