Approved changes feed: RSS · Atom

cpe:2.3:a:signal:private_messenger:4.24.8:*:*:*:*:android:*:*

part: a version: 4.24.8 update: *

VendorSignal (1528301b-b5f4-5810-a6e3-05f776be2194)
ProductPrivate Messenger (fef94dd9-c8aa-5811-afb3-45580c2610ab)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/tianon/signal-desktop purl2cpe 2026-06-01 10:16:00.259000
pkg:github/signalapp/signal-desktop purl2cpe 2026-06-01 10:16:00.259001
pkg:sourceforge/signal-desktop.mirror purl2cpe 2026-06-01 10:16:00.259003

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-3988 vulnerable 2026-06-08 05:11:41.548640 Details available
LOW (3.3)
Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature available in the "attach file" menu, then Signal will leave the picture in its own cache directory, which is available to any application on the system.
Published: 2018-12-10T17:00:00.000Z
Updated: 2024-08-05T04:57:24.494Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.