Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victimβs Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.
[
{
"product": "Signal Private Messenger",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Android versions v4.59.0 and up, iOS versions v3.8.1.5 and up"
}
]
}
]