description: Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.
problem types: Information Disclosure
affected:
{
product: Signal Private Messenger
vendor: n/a
versions:
status: affected, version: Android versions v4.59.0 and up, iOS versions v3.8.1.5 and up
}