Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.
{
"source": "CPE_RANGE",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "4.59.0"
}
],
"cpe": "cpe:2.3:a:signal:private_messenger:*:*:*:*:*:android:*:*"
}
{
"source": "CPE_RANGE",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "3.8.1.5"
}
],
"cpe": "cpe:2.3:a:signal:signal:*:*:*:*:*:iphone_os:*:*"
}