VULNERABILITY INTELLIGENCE

CVE-2018-16132

CVSS score8.6 HIGH
EPSS probability1.08%
CISA KEVNot currently listed
Published2018-08-29
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Description

The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably large images before manipulating received images. This allows for a large image sent to a user to exhaust all available memory when the image is displayed, resulting in a forced restart of the device.

Weakness classification

  • CWE-400: Uncontrolled Resource Consumption

Primary references