Lucene search

K
cvelistFacebookCVELIST:CVE-2020-1907
HistoryOct 06, 2020 - 5:35 p.m.

CVE-2020-1907

2020-10-0617:35:27
CWE-787
facebook
www.cve.org
5
whatsapp
android
ios
portal
stack overflow
arbitrary code execution
rtp extension header

AI Score

9.4

Confidence

High

EPSS

0.005

Percentile

77.5%

A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsApp Business for iOS prior to v2.20.90, and WhatsApp for Portal prior to v173.0.0.29.505 could have allowed arbitrary code execution when parsing the contents of an RTP Extension header.

CNA Affected

[
  {
    "product": "WhatsApp for Android",
    "vendor": "Facebook",
    "versions": [
      {
        "status": "affected",
        "version": "2.20.196.16"
      },
      {
        "lessThan": "2.20.196.16",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "WhatsApp Business for Android",
    "vendor": "Facebook",
    "versions": [
      {
        "status": "affected",
        "version": "2.20.196.12"
      },
      {
        "lessThan": "2.20.196.12",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "WhatsApp for iOS",
    "vendor": "Facebook",
    "versions": [
      {
        "status": "affected",
        "version": "2.20.90"
      },
      {
        "lessThan": "2.20.90",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "WhatsApp Business for iOS",
    "vendor": "Facebook",
    "versions": [
      {
        "status": "affected",
        "version": "2.20.90"
      },
      {
        "lessThan": "2.20.90",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "WhatsApp for Portal",
    "vendor": "Facebook",
    "versions": [
      {
        "status": "affected",
        "version": "173.0.0.29.505"
      },
      {
        "lessThan": "173.0.0.29.505",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

9.4

Confidence

High

EPSS

0.005

Percentile

77.5%

Related for CVELIST:CVE-2020-1907