Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NSignal Private Messenger
APPSignal≤ 4.59.0Signal
APPSignal≤ 3.8.1.5
Powiązane podatności
The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videocon...
The Signal app before 5.34 for iOS allows URI spoofing via RTLO injection. It incorrectly renders RTLO encoded...
The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answe...
The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fai...
Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4...