Description (CNA)
A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malformed data to load an image from a sender-controlled URL without user interaction.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Facebook / WhatsApp for Android | affected 2.20.11; affected unspecified before 2.20.11 |
| Facebook / WhatsApp Business for Android | affected 2.20.2; affected unspecified before 2.20.2 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.