Signal has fixed a bug in its Android app that caused random images to be sent to contacts in some cases.
The bug was first reported in December 2020; however, it was only fixed this month due to the difficulty of replicating the bug.
When a user sends an image to one of their contacts using the Signal Android app, the contact may receive not only the selected image, but also a few random, unintentional photos that the sender had never sent out.
The exposed images, on the other hand, were not of a sensitive nature.
Signal’s team promptly requested logs after receiving the original December 2020 complaint in order to debug and remediate the bug.
However, it required a long time and a lot of effort to successfully reproduce the issue.
A new version of the Signal Android app has been released.
The patch is included in Signal Android app version 5.17, which was released earlier this month.
Greyson Parrelli, an Android developer at Signal, indicated that Signal takes bugs like these very seriously.
This bug was extremely rare, and because they didn’t have metrics or remote log collection, they had to spend time adding logging and gathering user-submitted logs in order to trace it down.
This bug has only affected the Android version of the app so far.
It is suggested that all Android users of the end-to-end encrypted messaging app update to the latest version available on the Google Play Store.
You might also like:
Kaseya obtained a universal decryptor for REvil ransomware attack
Another Twitter hacker arrested, involved in the 2020 twitter hack
APT hackers spread Android malware through Syrian e-Gov portal
Joker Trojan discovered in 11 Android apps: Reports
XLoader windows info-stealer malware now designed to attack macOS
Signal testing a new payment feature with Mobilecoin’s MOB cryptocurrency