CVE-2023-48221: Wire Audio, Video, And Signaling

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

wire-avs provides Audio, Visual, and Signaling (AVS) functionality sure the secure messaging software Wire. Prior to versions 9.2.22 and 9.3.5, a remote format string vulnerability could potentially allow an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 9.2.22 & 9.3.5 and is already included on all Wire products. No known workarounds are available.

Affected products

• Wire Audio, Video, And Signaling: before 9.2.22 (fixed in 9.2.22); from 9.3.0, up to and including 9.3.5

Published 2023-11-20. Last modified 2026-06-17.