Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victims Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.
The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Private_messenger | Signal | * | 4.59.0 (including) |
| Signal | Signal | * | 3.8.1.5 (including) |