Security News > 2021 > July > Signal fixes bug that sent random images to wrong contacts

Signal fixes bug that sent random images to wrong contacts
2021-07-26 12:51

Signal has fixed a serious bug in its Android app that, in some cases, sent random unintended pictures to contacts without an obvious explanation.

When sending an image using the Signal Android app to one of your contacts, the contact would occasionally receive not just the selected image, but additionally a few random, unintended images, that the sender had never sent out.

"Anytime I send images or links, other images or images from link previews are sent to the other party as well."

"It's gotten to the point where I send the images to my desktop via 'note to self' and then I download the image and send it along to the correct person," said Christopher M. Hobbs in the same thread. Bug caused by "Rare intersection" of database properties.

"This is crazy. This bug should be the number 1 priority for Signal right now and yet all they do is ask for logs and make enhancements that aren't anywhere near as important as fixing this. This is a bug that should kill Signal, honestly," complained pseudonymous security and privacy advocate InfiniteLight.

Another user, Adrian Ostrowski expressed that a bug like this effectively made it impossible to share images confidentially via Signal.


News URL

https://www.bleepingcomputer.com/news/security/signal-fixes-bug-that-sent-random-images-to-wrong-contacts/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Signal 3 2 9 2 1 14