Medium severity6.8OSV Advisory· Published Apr 10, 2018· Updated Jun 17, 2026

CVE-2018-9840

Description

The Open Whisper Signal app before 2.23.2 for iOS allows physically proximate attackers to bypass the screen locker feature via certain rapid sequences of actions that include app opening, clicking on cancel, and using the home button.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Signalapp/Signal IosOSV
Range: 0.1, 1.0, 1.0.2, …
Open Whisper/Signalllm-create
Range: <2.23.2

Patches

Vulnerability mechanics

References

github.com/signalapp/Signal-iOS/commit/018a35df7b42b4941cb4dfc9f462b37c3fafd9e9nvdPatchThird Party Advisory
github.com/signalapp/Signal-iOS/commits/release/2.23.2nvdIssue TrackingPatchThird Party Advisory
nint.en.do/Signal-Bypass-Screen-locker.phpnvdBroken LinkThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000