Android Google Play Signal Foundation
Signal
Current version
8.24.2
org.thoughtcrime.securesms
Version 8.24.2 of Signal on Android has no known open CVE (5 referenced, fixed or indeterminable).
- Known vulnerabilities
- 5
- Still open
- 0
- KEV open
- 0
- Max CVSS (open)
- -
9.8 historical
Known vulnerabilities (CVE)
Latest matched CVE: 2020 · limited CPE coverage for this vendor : absence of recent CVEs is not a guarantee
Test a different version
8.24.2 closes no known CVE
No CVE is open on this version, and none was fixed by it. 4 were fixed in earlier versions, listed below.
Show 4 CVEs fixed in earlier versions Hide the 4 CVEs fixed earlier
| CVE |
|---|
|
CVE-2020-5753
Fixed
MEDIUM 5.3
Network Fixed in: > 4.59.0
|
|
CVE-2019-17192
Fixed
CRITICAL 9.8
Network Fixed in: > 4.47.7
|
|
CVE-2019-17191
Fixed
HIGH 7.5
Network Fixed in: 4.47.7
|
|
CVE-2019-9970
Fixed
MEDIUM 6.5
Network Fixed in: > 4.35.3
|
1 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Context
Context
Description
Say “hello” to privacy.
Data collected and shared
Source: Play Store Data Safety · 1 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
Technical details
- Publisher
- Signal Foundation
- Distribution channel
- Google Play
- Identifier
- org.thoughtcrime.securesms
FAQ
FAQ: Signal
Does Signal have known security vulnerabilities?
Signal (org.thoughtcrime.securesms) on Android has 5 CVE referenced in NVD, 0 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Is the current version of Signal affected by any open CVE?
Version 8.24.2 of Signal on Android has no open CVE referenced in NVD. Absence of a CVE is not a security guarantee.
Is Signal affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting Signal (org.thoughtcrime.securesms) is currently in the CISA KEV catalog.
What is the latest known version of Signal?
The most recent version of Signal (org.thoughtcrime.securesms) tracked by Appaloosa Scout is 8.24.2, published by Signal Foundation.