WB
Product
WhatsApp Business for iOS
On CISA KEVExploited in the wild
15
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 1Medium 7Low 0
Watch
Add WhatsApp Business for iOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3568 In wildKEV | 9.8 | May 14 | WhatsApp VOIP Stack Buffer Overflow Vulnerability Affected: 2.19.51; before 2.19.51 |
| CVE-2021-24042 | 9.8 | Jan 4 | The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior… Affected: before v2.21.230 |
| CVE-2021-24026 | 9.8 | Apr 6 | A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v2.21.3, WhatsApp for… Affected: before v2.21.32 |
| CVE-2020-1909 | 9.8 | Nov 3 | A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in memory corruption, crashes and… Affected: 2.20.111; before 2.20.111; 2.20.81 before unspecified |
| CVE-2020-1907 | 9.8 | Oct 6 | A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsApp Business for iOS… Affected: 2.20.90; before 2.20.90 |
| CVE-2018-6350 | 9.8 | Jun 14 | An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers Affected: 2.18.100.2; before 2.18.100.2 |
| CVE-2018-20655 | 9.8 | Jun 14 | When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow Affected: 2.18.90.24; before 2.18.90.24 |
Showing 7