Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

The vulnerability of the applyFilterIntoBuffer() function in the messaging and video call application WhatsApp, related to writing data beyond the buffer boundary in memory, allows a malicious actor to cause service failures or gain access to confidential information from WhatsApp’s memory.

🗓️ 25 Nov 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec🔗 bdu.fstec.ru👁 4 Views

WhatsApp's applyFilterIntoBuffer overflow risk from writing beyond memory bounds could cause service failures or memory leakage via crafted images.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2020-1910
2 Feb 202122:39
–circl
CNNVD		Facebook WhatsApp for Android and WhatsApp Business for Android Buffer Error Vulnerability
2 Feb 202100:00
–cnnvd
CVE		CVE-2020-1910
2 Feb 202119:55
–cve
Cvelist		CVE-2020-1910
2 Feb 202119:55
–cvelist
EUVD		EUVD-2020-12736
7 Oct 202500:30
–euvd
NVD		CVE-2020-1910
2 Feb 202120:15
–nvd
Prion		Out-of-bounds
2 Feb 202120:15
–prion
RedhatCVE		CVE-2020-1910
22 May 202515:16
–redhatcve
The Hacker News		WhatsApp Photo Filter Bug Could Have Exposed Your Data to Remote Attackers
2 Sep 202110:07
–thn
ThreatPost		WhatsApp Photo Filter Bug Allows Sensitive Info to Be Lifted
2 Sep 202112:28
–threatpost
Rows per page
Vulners
Node
meta_platformswhatsapp_businessRange<2.21.1.13android
OR
meta_platformswhatsappRange<2.21.1.13android

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
25 Nov 2021 00:00Current
7.6High risk
Vulners AI Score7.6
CVSS 37.5
CVSS 29.3
EPSS0.05118
buffer overflowmemory boundscrafted imagesapplyFilterIntoBufferWhatsApp vulnerability
4