CVE-2018-16132

The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably large images before manipulating received images. This allows for a large image sent to a user to exhaust all available memory when the image is displayed, resulting in a forced restart of the device.

Score

CVSS 3.0 8.6 High

Status

Modified - cve@mitre.org

Published

2018-08-29

Last modified

2024-08-05

Weaknesses

CWE-400

Affected products

• Signal (Signal)

References

• http://seclists.org/bugtraq/2018/Aug/57