Signal bug could keep your mic - and camera - on after hangup
Summary
A bug in Signal's Android app could leave a user's microphone and camera active even after a call has ended. This vulnerability could potentially allow sensitive information to be accessed without the user's knowledge. Users are advised to update their Signal app to the latest version to patch this issue.
IFF Assessment
This vulnerability allows for unauthorized access to a user's microphone and camera, posing a significant privacy risk and enabling potential eavesdropping.
Severity
The vulnerability allows for unauthorized access to sensitive hardware (microphone and camera) post-call, impacting confidentiality and integrity. The attack vector is local, and user interaction is not required once the app is running, making it a significant risk.
Defender Context
This incident highlights the importance of diligent security patching for communication applications. Defenders should prioritize updating Signal and similar apps, and users should be made aware of the potential for such vulnerabilities to compromise privacy and enable eavesdropping.