CoreCVE
Back

HIGH

The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably large images before manipulating received images

Published Aug 29, 2018

Description

The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably large images before manipulating received images. This allows for a large image sent to a user to exhaust all available memory when the image is displayed, resulting in a forced restart of the device.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 29, 2018
Updated Aug 5, 2024
Reserved Aug 29, 2018
Link CVE-2018-16132
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-16132
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-16132
ENISA EUVD
Assigner mitre
Published Aug 29, 2018
Updated Aug 5, 2024
Exploited since n/a
Link EUVD-2018-7987
EUVD-2018-7987