WH
Product
Whatsapp
On CISA KEVExploited in the wild
44
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 13Medium 15Low 1
Watch
Add Whatsapp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3568 In wildKEV | 9.8 | May 14 | WhatsApp VOIP Stack Buffer Overflow Vulnerability Affected: before 2.18.15; before 2.18.348; before 2.19.51; before 2.19.134 |
| CVE-2022-36934 | 9.8 | Sep 22 | An integer overflow in WhatsApp could result in remote code execution in an established video call Affected: before 2.22.16.12; before 2.22.16.12 |
| CVE-2021-24042 | 9.8 | Jan 4 | The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior… Affected: before 2.21.23; before 2.21.23; before 2.21.230; before 2.21.230; before 2.2143; before 2.2146 |
| CVE-2021-24041 | 9.8 | Dec 7 | A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a… Affected: before 2.21.22.7 |
| CVE-2021-24026 | 9.8 | Apr 6 | A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v2.21.3, WhatsApp for… Affected: before 2.21.3; before 2.21.3 |
| CVE-2020-1909 | 9.8 | Nov 3 | A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in memory corruption, crashes and… Affected: before 2.20.111 |
| CVE-2020-1907 | 9.8 | Oct 6 | A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsApp Business for iOS… Affected: before 2.20.90; before 2.20.196.16; before 173.0.0.29.505 |
| CVE-2020-1891 | 9.8 | Sep 3 | A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20,… Affected: before 2.20.17; before 2.20.20 |
| CVE-2019-11933 | 9.8 | Oct 23 | A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code… Affected: before 2.19.291 |
| CVE-2018-6350 | 9.8 | Jun 14 | An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers Affected: before 2.18.99; before 2.18.100.6; before 2.18.224 |
| CVE-2018-6349 | 9.8 | Jun 14 | When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow Affected: before 2.18.248 |
| CVE-2018-6339 | 9.8 | Jun 14 | When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in Affected: 2.18.180 before 2.18.295 |
| CVE-2018-20655 | 9.8 | Jun 14 | When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow Affected: before 2.18.90.24 |
| CVE-2021-24043 | 9.1 | Feb 2 | A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230.6, WhatsApp Business… Affected: 2.21.23.2; 2.21.230.6; 2.2145.0 |
| CVE-2021-24035 | 9.1 | Jun 11 | A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal… Affected: before 2.21.8.13 |
Showing 15