What is GHSA-rx59-vg9j-fpm4?

GHSA-rx59-vg9j-fpm4 is a security advisory published by GitHub Security Advisories with Medium severity. Viber for iOS through 29.4.0.24 fails to validate the logical screen width and height in received...

Which CVE IDs does GHSA-rx59-vg9j-fpm4 cover?

GHSA-rx59-vg9j-fpm4 covers the following CVE IDs: CVE-2026-126546. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rx59-vg9j-fpm4?

GHSA-rx59-vg9j-fpm4 has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-rx59-vg9j-fpm4MediumCVSS 4.3

Viber for iOS through 29.4.0.24 fails to validate the logical screen width and height in received...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-126546 →

📋 Description

Viber for iOS through 29.4.0.24 fails to validate the logical screen width and height in received GIF headers, allowing attackers to crash the app. Attackers can send a crafted GIF with zero dimensions that triggers an uncaught NSInternalInconsistencyException, aborting the app with SIGABRT when opened.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-126546
https://www.viber.com
https://www.vulncheck.com/advisories/viber-for-ios-through-29.4.0.24-denial-of-service-via-malformed-gif
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-6039.php
https://github.com/advisories/GHSA-rx59-vg9j-fpm4