CVE-2026-126546 · Other
NO FIX YET
Viber for iOS through 29.4.0.24 does not validate the logical screen width and height in GIF headers. A crafted GIF with zero dimensions triggers an uncaught exception that aborts the app when the image is opened, so an attacker can crash it.
first public Nov 11, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Users of Viber for iOS through 29.4.0.24 who receive images from other people. The flaw is a crash rather than code execution, and the sources do not say whether any fixed version exists.
Not affected if android, newer-version
Who cares ios, viber
29.4.0.24, which is the last affected version according to the description.No fix yet, per the sources.
Viber for iOS through 29.4.0.24 fails to validate the logical screen width and height in received GIF headers, allowing attackers to crash the app. Attackers can send a crafted GIF with zero dimensions that triggers an uncaught NSInternalInconsistencyException, aborting the app with SIGABRT when opened.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.