CVE-2018-16132
Last modified
CVE-2018-16132 is a vulnerability of currently unknown severity. The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably large images before manipulating received images. This allows for a large image sent to a user to exhaust all available memory when the image is displayed, resulting in a forced restart of the device.. EPSS estimates a 1.08% chance of exploitation in the next 30 days.
Description
The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably large images before manipulating received images. This allows for a large image sent to a user to exhaust all available memory when the image is displayed, resulting in a forced restart of the device.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Signal | Signal | <= 2.29.0 |
References
- http://seclists.org/bugtraq/2018/Aug/57Mailing List, Third Party Advisory
- http://seclists.org/bugtraq/2018/Aug/57Mailing List, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-16132?
How severe is CVE-2018-16132?
How do I fix CVE-2018-16132?
Are you affected by CVE-2018-16132?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST