CVE-2020-5753

Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used…

published May 20, 2020

CVSS
—
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01102 · 65.4th percentile
Published
2020-05-20T13:40Z
EPSS history
Timeline
  • 20 MAY 13:40Z
    Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used…
    cvelistv5