AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-3987

MEDIUM · CVSS 5.5 EPSS 0.38% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-02-13 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.5. It affects Android. Public exploit code or proof-of-concept references have been detected in its references.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2018-3987
Severity
MEDIUM
CVSS
5.5
EPSS
0.38%
Android

Original NVD Description

An exploitable information disclosure vulnerability exists in the 'Secret Chats' functionality of Rakuten Viber on Android 9.3.0.6. The 'Secret Chats' functionality allows a user to delete all traces of a chat either by using a time trigger or by direct request. There is a bug in this functionality which leaves behind photos taken and shared on the secret chats, even after the chats are deleted. These photos will be stored in the device and accessible to all applications installed on the Android device.

Related CVEs

Other vulnerabilities affecting the same vendor(s)