Lucene search

K
cvelistFacebookCVELIST:CVE-2020-1894
HistorySep 03, 2020 - 9:10 p.m.

CVE-2020-1894

2020-09-0321:10:19
CWE-787
facebook
www.cve.org

8.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.1%

A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.20.30 could have allowed arbitrary code execution when playing a specially crafted push to talk message.

CNA Affected

[
  {
    "product": "WhatsApp Android",
    "vendor": "Facebook",
    "versions": [
      {
        "status": "affected",
        "version": "2.20.35"
      },
      {
        "lessThan": "2.20.35",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "WhatsApp Business for Android",
    "vendor": "Facebook",
    "versions": [
      {
        "status": "affected",
        "version": "2.20.20"
      },
      {
        "lessThan": "2.20.20",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "WhatsApp iPhone",
    "vendor": "Facebook",
    "versions": [
      {
        "status": "affected",
        "version": "2.20.30"
      },
      {
        "lessThan": "2.20.30",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "WhatsApp Business for iPhone",
    "vendor": "Facebook",
    "versions": [
      {
        "status": "affected",
        "version": "2.20.30"
      },
      {
        "lessThan": "2.20.30",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

8.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.1%

Related for CVELIST:CVE-2020-1894