Exploiting Android Messengers with WebRTC: Part 1
Project Zero's Natalie Silvanovich detailed two WebRTC RTP extension bugs, CVE-2020-6389 and CVE-2020-6387, both introduced in extensions implemented in WebRTC in 2019, and tested whether they were exploitable in popular Android messaging applications....