Is CVE-2022-31009 actively exploited?

No active exploitation of CVE-2022-31009 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-31009 be exploited remotely?

Yes. CVE-2022-31009 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2022-31009?

CVE-2022-31009 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2022-31009

MEDIUM

CVE-2022-31009

CWE-617Published: June 23, 2022· Updated: Jun 17, 2026

6.5

CVSS v3.1

Official Description

wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch. These invalid accent colors can be used by and sent between Wire users. The root cause was an unnecessary assert statement when converting an integer value into the corresponding enum value, causing an exception instead of a fallback to a default value. This issue is fixed in [wire-ios](https://github.com/wireapp/wire-ios/commit/caa0e27dbe51f9edfda8c7a9f017d93b8cfddefb) and in Wire for iOS 3.100. There is no workaround available, but users may use other Wire clients (such as the [web app](https://app.wire.com)) to continue using Wire, or upgrade their client.

NVD Source

Technical Analysis

CVE-2022-31009 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 6.5.