CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Android. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2019-17192
Severity
CRITICAL
CVSS
9.8
EPSS
2.73%
Android
Original NVD Description
The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before a callee chooses to answer a call, which might make it easier for remote attackers to cause a denial of service or possibly have unspecified other impact via malformed packets. NOTE: the vendor plans to continue this behavior for performance reasons unless a WebRTC design change occurs
Related CVEs
Other vulnerabilities affecting the same vendor(s)