CVE-2020-6514 2

Vulnerability (CVE)

Exploiting Android Messengers with WebRTC: Part 2

Project Zero's Natalie Silvanovich, in Part 2 of a three-part series published August 5, 2020, found CVE-2020-6514, a WebRTC bug that sends the memory location of the SctpTransport object to the remote peer during every SCTP connection, and a...

Vulnerabilities & Patching

Exploiting Android Messengers with WebRTC: Part 3

Cyber Risks Google Project Zero

Project Zero's Natalie Silvanovich built a Frida-based exploit for WebRTC vulnerabilities on Android and tested it against 14 conferencing apps narrowed from roughly 200 that use WebRTC, finding it worked on Signal about 90% of the time and also on Google...

Vulnerabilities & Patching