Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-13476

Rakuten Viber uses broken or risky cryptographic Algorithm

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
certcc

Description

Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection (DPI) systems to trivially identify and block proxy traffic, undermining censorship circumvention. (CWE-327)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rakuten Viber Rakuten Viber Cloak - Android

  • 25.7.2.0g to < 27.2.0.0gaffected

Rakuten Viber Rakuten Viber Cloak - Windows

  • v25.6.0.0 to < v27.3.0.0affected

References