CVE-2024-34063

vodozemac is an implementation of Olm and Megolm in pure Rust. Versions 0.5.0 and 0.5.1 of vodozemac have degraded secret zeroization capabilities, due to changes in third-party cryptographic dependencies (the Dalek crates), which moved secret zeroization capabilities behind a feature flag and defaulted this feature to off. The degraded zeroization capabilities could result in the production of more memory copies of encryption secrets and secrets could linger in memory longer than necessary. This marginally increases the risk of sensitive data exposure. This issue has been addressed in version 0.6.0 and users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-1188

• https://github.com/matrix-org/vodozemac/commit/297548cad4016ce448c4b5007c54db7ee39489d9
• https://github.com/matrix-org/vodozemac/security/advisories/GHSA-c3hm-hxwf-g5c6
• https://github.com/matrix-org/vodozemac/commit/297548cad4016ce448c4b5007c54db7ee39489d9
• https://github.com/matrix-org/vodozemac/security/advisories/GHSA-c3hm-hxwf-g5c6

Published

May 3, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-34057Triangle Microworks TMW IEC 61850 Client source code librari…7.5
• CVE-2024-34058The WebTop package for NethServer 7 and 8 allows stored XSS …8.8
• CVE-2024-3406The WP Prayer WordPress plugin through 2.0.9 does not have C…8.8
• CVE-2024-34060IrisEVTXModule is an interface module for Evtx2Splunk and Ir…8.8
• CVE-2024-34061changedetection.io is a free open source web page change det…4.3
• CVE-2024-34062tqdm is an open source progress bar for Python and CLI. Any …4.8
• CVE-2024-34064Jinja is an extensible templating engine. The `xmlattr` filt…5.4
• CVE-2024-34065Strapi is an open-source content management system. By combi…8.1
• CVE-2024-34066Pterodactyl wings is the server control plane for Pterodacty…8.4
• CVE-2024-34067Pterodactyl is a free, open-source game server management pa…6.1
• CVE-2024-34068Pterodactyl wings is the server control plane for Pterodacty…6.4
• CVE-2024-34069Werkzeug is a comprehensive WSGI web application library. Th…7.5