[CVE-2025-55305] Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more

CVE

CVE-2025-55305

Published

2025-09-04 04:00

Collected

2026-07-03 03:32

---
id: 1343
title: "[CVE-2025-55305] Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more"
cve: CVE-2025-55305
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2025/09/03/subverting-code-integrity-checks-to-locally-backdoor-signal-1password-slack-and-more/"
published_at: "2025-09-04 04:00"
tags: ["backdoor", "vulnerability-disclosure", "v8", "chromium", "electron", "cve-2025-55305", "code-integrity", "signal", "1password"]
phying_url: "https://phying.com/item/1343"
lang: en
---

# [CVE-2025-55305] Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more

## Summary

Trail of Bits details Electron CVE-2025-55305: overwriting V8 heap snapshot files bypasses code integrity checks, enabling local backdoors in Signal, 1Password, Slack, and other Chromium-based apps.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **CVE:** CVE-2025-55305
- **Published:** 2025-09-04 04:00
- **Original:** https://blog.trailofbits.com/2025/09/03/subverting-code-integrity-checks-to-locally-backdoor-signal-1password-slack-and-more/
- **Phying News:** https://phying.com/item/1343