Skip to content
OpenAdvisories
Low · 3.3 CVE-2018-3988 EUVD-2018-15774GHSA-f287-vf22-3v2c

Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature ava…

Published Dec 10, 2018 · Updated Aug 5, 2024 · Assigned by talos

Description

Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature available in the "attach file" menu, then Signal will leave the picture in its own cache directory, which is available to any application on the system.

Affected products

VendorProductAffectedFixed
— Signal Signal Messenger Android 4.24.8 —

References