CVE-2020-5753

—

CVSS 3.1

5.3 medium

EPSS

1%p63

Published

May 20, 2020 (May 20, 2020)

Modified

Jun 17, 2026

Description

Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.

Vendors: signal
Products: private messenger, signal
Weakness: CWE-670
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.