whisperfish

Products

ProductCVEsExploitedLatest
libsignal-service-rs2–Feb 13, 2025
rust-phonenumber2–Jul 9, 2024
blurhash-rs1–Sep 19, 2023

Exploited and recent CVEs

  • CVE-2025-24904 High 8.5 libsignal-service-rs doesn't sanity check plaintext envelopes are not sanity-checked 0.2%
  • CVE-2025-24903 High 8.5 libsignal-service-rs Doesn't Check Origin of Sync Messages 0.2%
  • CVE-2024-39697 High 8.6 phonenumber panics on parsing crafted phonenumber inputs 0.7%
  • CVE-2023-42447 High 8.6 blurhash panics on parsing crafted inputs 0.6%
  • CVE-2023-42444 High 8.6 phonenumber panics on parsing crafted RF3966 inputs 0.9%