Stack overflow

2019-06-1417:29:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

JSON

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for Android prior to 2.18.248 and WhatsApp Business for Android prior to 2.18.132.

CPENameOperatorVersion
whatsapplt2.18.132
whatsapplt2.18.248

CPE	Name	Operator	Version
	whatsapp	lt	2.18.132
	whatsapp	lt	2.18.248

References

www.securityfocus.com/bid/108804

www.facebook.com/security/advisories/cve-2018-6349/