Description
Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Signal Private Messenger | Android versions v4.59.0 and up, iOS versions v3.8.1.5 and up | — |