VULNERABILITY INTELLIGENCE

CVE-2018-9840

CVSS score6.8 MEDIUM

EPSS probability0.42%

CISA KEVNot currently listed

Published2018-04-10

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The Open Whisper Signal app before 2.23.2 for iOS allows physically proximate attackers to bypass the screen locker feature via certain rapid sequences of actions that include app opening, clicking on cancel, and using the home button.

Primary references

cve@mitre.org — Broken Link, Third Party Advisory
cve@mitre.org — Patch, Third Party Advisory
cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Third Party Advisory