Unsecured Audio Channel in Signal Private Messenger for Android
CVE-2019-17191

7.5HIGH

Key Information:

Vendor: Signal
Status: Private Messenger
Vendor: CVE Published:; 5 October 2019

What is CVE-2019-17191?

A vulnerability in the Signal Private Messenger application for Android allows attackers to establish an audio call without user consent. The affected versions, prior to 4.47.7, enable a caller to send a connect message that forces the call to be answered on the callee's device, potentially leading to eavesdropping as the audio channel may open before the callee can take action to block the call.