CVE-2024-40648

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The `UserIdentity::is_verified()` method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's own identity while performing the check and may as a result return a value contrary to what is implied by its name and documentation. If the method is used to decide whether to perform sensitive operations towards a user identity, a malicious homeserver could manipulate the outcome in order to make the identity appear trusted. This is not a typical usage of the method, which lowers the impact. The method itself is not used inside the `matrix-sdk-crypto` crate. The 0.7.2 release of the `matrix-sdk-crypto` crate includes a fix. All users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-287

• https://github.com/matrix-org/matrix-rust-sdk/commit/76a7052149bb8f722df12da915b3a06d19a6695a
• https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-4qg4-cvh2-crgg
• https://github.com/matrix-org/matrix-rust-sdk/commit/76a7052149bb8f722df12da915b3a06d19a6695a
• https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-4qg4-cvh2-crgg

Published

Jul 18, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-40642The netty incubator codec.bhttp is a java language binary ht…8.1
• CVE-2024-40643Joplin is a free, open source note taking and to-do applicat…9.6
• CVE-2024-40644gitoxide An idiomatic, lean, fast & safe pure Rust implement…6.8
• CVE-2024-40645FOG is a cloning/imaging/rescue suite/inventory management s…8.8
• CVE-2024-40646Vertex is a management tool for PT (Private Tracker) users t…8.6
• CVE-2024-40647sentry-sdk is the official Python SDK for Sentry.io. A bug i…5.3
• CVE-2024-40649In TBD of TBD, there is a possible use-after-free due to a l…8.4
• CVE-2024-4065A vulnerability was found in Tenda AC8 16.03.34.09. It has b…8.8
• CVE-2024-40650In wifi_item_edit_content of styles.xml , there is a possibl…7.8
• CVE-2024-40651In TBD of TBD, there is a possible use-after-free due to a l…8.4
• CVE-2024-40652In onCreate of SettingsHomepageActivity.java, there is a pos…7.8
• CVE-2024-40653In multiple functions of ConnectionServiceWrapper.java, ther…7.3