← Database

CVE-2026-126546

MEDIUM CVSS: 4.3 Published: 2026-11-11 Modified: 2026-11-11

Description

Viber for iOS through 29.4.0.24 fails to validate the logical screen width and height in received GIF headers, allowing attackers to crash the app. Attackers can send a crafted GIF with zero dimensions that triggers an uncaught NSInternalInconsistencyException, aborting the app with SIGABRT when opened.

Affected Platforms

Unknown

Weakness Type

CWE-248

References