EUVD-2025-208314

Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection DPI systems to trivially identify and block proxy traffic, undermining censorship circumvention...

CVE-2025-13476

CVE-2025-13476 affects Rakuten Viber Cloak mode on Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0. The root cause is a consistent, static TLS ClientHello fingerprint with a lack of extension diversity, making DPI systems able to identify and block proxy traffic and undermine censorship circum...

A flawed TLS handshake implementation affects Viber Proxy in multiple platforms

Overview The Rakuten Viber messaging app for Android V25.7.2.0g and Windows V25.6.0.0-V25.8.1.0, has a flaw in its TLS handshake implementation when using the Cloak proxy configuration. This flaw allows for easy identification of proxy usage, potentially compromising user anonymity. Description...