CVE-2025-13476

critical · 9.8

Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection (DPI) systems to trivially identify and block proxy traffic, undermining censorship circumvention. (CWE-327)

9.8

CVSS

0.3%

EPSS (exploit prob.)

28th

EPSS percentile

2026-03-05

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-327

Affected products

Vendor	Product	Affected versions
rakuten	viber	>= 25.6.0, <= 25.8.1.0
rakuten	viber	9.3.0.6

Check a specific version with /api/v1/cve/match.

References

https://www.viber.com/en/download/
https://www.kb.cert.org/vuls/id/772695

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-13476