WS-2020-0398

In “signalapp/Signal-Android”, v4.58.1 is vulnerable to internal crash and internal error exposure via profile retrieval process...

WS-2017-3782

In “signalapp/Signal-Android”, v4.8.0 to v4.9.8 are vulnerable against XXE as a result of unsanitized CONTACTNAME parameter...

WS-2017-3781

In “signalapp/Signal-Android”, v2.1.0 to v3.27.1 are vulnerable to SSL stripping. Some links use HTTP protocol instead of HTTPS...

WS-2013-0242

In “signalapp/Signal-Android” versions before 1.0 are using insecure algorithm for generating random numbers PRNG, which may allow attackers to spoof identity keys...

WS-2012-0026

In “signalapp/Signal-Android” versions before 0.9.9.1 writes sensitive information such as cleartext MMS messages into log files...