medium5.3
CVE-2020-5753
Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used…
Impact
Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Signal | Private Messenger | through 4.59.0 |
| Signal | Signal | through 3.8.1.5 |