CVE-2019-17191

CVE-2019-17191 describes a high-severity vulnerability in Signal Private Messenger for Android versions prior to 4.47.7, allowing an attacker to force a call to be answered without user interaction. This flaw could lead to unauthorized audio eavesdropping, as the audio channel might open before the callee can react, despite the call's presence being noticeable. With a CVSS score of 7.5 (HIGH), the attack requires no user interaction and has low complexity, posing a significant privacy risk. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage, indicating its potential impact.