CVE-2019-17191

The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee user interaction, via a…

published October 5, 2019

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee user interaction, via a connect message. The existence of the call is noticeable to the callee; however, the audio channel may be open before the callee can block eavesdropping.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01755 · 77.8th percentile
Published
2019-10-05T01:15Z
EPSS history
Timeline
  • 05 OCT 01:15Z
    The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee user interaction, via a…
    cvelistv5