matrix-sdk-base Room Member Power Level Panic Vulnerability

A panic vulnerability has been identified in the matrix-sdk-base component, specifically in versions prior to 0.14.1. The issue arises when the RoomMember::normalized_power_level() method is called for a room member with a power level of Int::Min. This can lead to a runtime panic. The vulnerability is not present in matrix-sdk-base version 0.14.1 and later.

Impact

Exploitation of this vulnerability causes a runtime panic, which can disrupt the normal operation of the application by causing a crash or unexpected termination.

Remediation

Users can upgrade to matrix-sdk-base version 0.14.1 or later to address this vulnerability. The issue can also be avoided by not calling the RoomMember::normalized_power_level() method, as it is not used internally in the application.