Description (CNA)
A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to v2.18.172.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Facebook / WhatsApp for Android | affected 2.18.293; affected unspecified before 2.18.293 |
| Facebook / WhatsApp for iOS | affected 2.18.93; affected unspecified before 2.18.93 |
| Facebook / WhatsApp for Windows Phone | affected 2.18.172; affected unspecified before 2.18.172 |
CWE
CWE-122
References
- https://googleprojectzero.blogspot.com/2018/12/adventures-in-video-conferencing-part-3.html
- http://www.securityfocus.com/bid/106365
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.