CVE-2018-3988
3.3
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Summary
Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature available in the "attach file" menu, then Signal will leave the picture in its own cache directory, which is available to any application on the system.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | Signal | Signal Messenger Android 4.24.8 | affected |
Weaknesses
- privacy violation
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/bid/106207
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0656
References
- http://www.securityfocus.com/bid/106207
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0656
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.