PT-2026-144925

CVE-2026-126546

·

Published

2026-11-11

·

Updated

2026-11-11

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Viber for iOS through 29.4.0.24 fails to validate the logical screen width and height in received GIF headers, allowing attackers to crash the app. Attackers can send a crafted GIF with zero dimensions that triggers an uncaught NSInternalInconsistencyException, aborting the app with SIGABRT when opened.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-248: Uncaught Exception
Related identifiers
CVE-2026-126546
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com