CVE-2022-45195: Simplex Chat
Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.
SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere with forward secrecy and can have other impacts if there is a compromise of a single private key. This occurs in the X3DH key exchange for the double ratchet protocol.
Affected products
Published 2022-11-12. Last modified 2026-06-17.