CVE WATCH / VULNERABILITY DETAIL
CVE-2026-126546
MEDIUMCVSS 4.3NVD feed
Published 11 November 2026 · tracked since 11 November 2026
Description
Viber for iOS through 29.4.0.24 fails to validate the logical screen width and height in received GIF headers, allowing attackers to crash the app. Attackers can send a crafted GIF with zero dimensions that triggers an uncaught NSInternalInconsistencyException, aborting the app with SIGABRT when ope
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-126912 CRITICAL 9.6
- CVE-2026-126909 CRITICAL 9.6
- CVE-2026-126885 CRITICAL 9.6
- CVE-2026-126879 HIGH 8.8
- CVE-2026-126876 HIGH 8.8
- CVE-2026-126874 HIGH 8.8
- CVE-2026-126873 HIGH 8.8
- CVE-2026-126872 CRITICAL 9.6
- CVE-2026-126869 HIGH 8.8
- CVE-2026-126868 HIGH 8.8