Signal

Version

4.48.17

Version trail

org.thoughtcrime.securesms

Version 4.48.17 of Signal on Android remains exposed: 1 open CVEs out of 5 referenced.

Recommended action

Update to > 4.59.0 to clear the 1 open CVE.

Known vulnerabilities (CVE)

1 open 1 undetermined 3 fixed

Latest matched CVE: 2020 · limited CPE coverage for this vendor : absence of recent CVEs is not a guarantee

Test a different version

CVE	Status	Severity	Vector	KEV	Published	Fixed in
CVE-2020-5753 Open MEDIUM 5.3 Network Fixed in: > 4.59.0 2020-05-20	Open	MEDIUM 5.3	Network	—	2020-05-20	> 4.59.0

Show 3 CVEs fixed in earlier versions

CVE	Status	Severity	Vector	KEV	Published	Fixed in
CVE-2019-17192 Fixed CRITICAL 9.8 Network Fixed in: > 4.47.7 2019-10-05	Fixed	CRITICAL 9.8	Network	—	2019-10-05	> 4.47.7
CVE-2019-17191 Fixed HIGH 7.5 Network Fixed in: 4.47.7 2019-10-05	Fixed	HIGH 7.5	Network	—	2019-10-05	4.47.7
CVE-2019-9970 Fixed MEDIUM 6.5 Network Fixed in: > 4.35.3 2019-03-24	Fixed	MEDIUM 6.5	Network	—	2019-03-24	> 4.35.3

1 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show

Description, scores, permissions, trackers and HackerOne reports reflect the current store state and are only shown on the current page.

Appaloosa distributes and updates your Android and iOS apps from an enterprise store.