CVE-2026-126546
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Nov 11, 2026
Vendor
unknown
Description
Viber for iOS through 29.4.0.24 fails to validate the logical screen width and height in received GIF headers, allowing attackers to crash the app. Attackers can send a crafted GIF with zero dimensions that triggers an uncaught NSInternalInconsistencyException, aborting the app with SIGABRT when opened.