I discovered this a while ago, and I have yet to be contacted by vendors about this. I am making public CVE-2022-23835: A security analysis of Visual Voicemail

Detailed analysis: gitlab.com/kop316/vvm-disclosu

Thank you to CERT/CC for your help in trying to contact the vendors, in CERT/CC, it is filed under VU#383864.

Follow

@kop316 afaik, iPhone apps can't sent/receive sms. That is why silence.im doesn't have an iPhone app.

@zachdecook

iPhone apps, yes. But this is a system thing, and cell carriers use SMS for other network maintenance too (Cell Broadcasts are actually a special type of SMS!).

Sign in to participate in the conversation
Librem Social

Librem Social is an opt-in public network. Messages are shared under Creative Commons BY-SA 4.0 license terms. Policy.

Stay safe. Please abide by our code of conduct.

(Source code)

image/svg+xml Librem Chat image/svg+xml