Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
WhatsappWhatsapp Business

12 matches found

CVE
CVE•added 2019/05/14 8:29 p.m.•1327 views

CVE-2019-3568

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.1...

9.8CVSS9.3AI score0.36028EPSS
In wild
CVE
CVE•added 2019/06/14 5:29 p.m.•200 views

CVE-2018-6339

When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An off-by-one error meant that data was written beyond the allocated space on the stack. This issue affects WhatsApp for Android starting in version 2.18.180 and was...

9.8CVSS9AI score0.00433EPSS
CVE
CVE•added 2019/06/14 5:29 p.m.•194 views

CVE-2018-6350

An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, WhatsApp Business for Android prior to 2.18.99, WhatsApp for iOS prior to 2.18.100.6, WhatsApp Business for iOS prior to 2.18.100.2, and Whats...

9.8CVSS8.7AI score0.004EPSS
CVE
CVE•added 2019/06/14 5:29 p.m.•129 views

CVE-2018-20655

When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for iOS prior to v2.18.90.24 and WhatsApp Business for iOS prior to v2.18.90.24.

9.8CVSS8.9AI score0.0054EPSS
CVE
CVE•added 2019/06/14 5:29 p.m.•128 views

CVE-2018-6349

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for Android prior to 2.18.248 and WhatsApp Business for Android prior to 2.18.132.

9.8CVSS9AI score0.01312EPSS
CVE
CVE•added 2022/09/22 10:15 p.m.•90 views

CVE-2022-36934

An integer overflow in WhatsApp could result in remote code execution in an established video call.

9.8CVSS9.8AI score0.0826EPSS
CVE
CVE•added 2021/06/11 4:15 a.m.•80 views

CVE-2021-24035

A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.

9.1CVSS8.9AI score0.00484EPSS
CVE
CVE•added 2022/02/02 12:15 p.m.•69 views

CVE-2021-24043

A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230.6, WhatsApp Business for iOS 2.21.230.7, and WhatsApp Desktop v2.2145.0 could have allowed an out-of-bounds heap read if a user sent a malfo...

9.1CVSS8.5AI score0.00788EPSS
CVE
CVE•added 2020/10/06 6:15 p.m.•44 views

CVE-2020-1907

A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsApp Business for iOS prior to v2.20.90, and WhatsApp for Portal prior to v173.0.0.29.505 could have allowed arbitrary code execution when par...

9.8CVSS9.3AI score0.01667EPSS
CVE
CVE•added 2021/12/07 7:15 p.m.•39 views

CVE-2021-24041

A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image.

9.8CVSS9.2AI score0.00689EPSS
CVE
CVE•added 2020/11/03 8:15 p.m.•33 views

CVE-2020-1909

A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in memory corruption, crashes and potentially code execution. This could have happened only if several events occurred together in sequence, including re...

9.8CVSS9.2AI score0.00991EPSS
CVE
CVE•added 2020/09/03 9:15 p.m.•32 views

CVE-2020-1891

A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20, and WhatsApp Business for iPhone prior to v2.20.20 could have allowed an out-of-bounds write on 32-bit devices.

9.8CVSS9.1AI score0.00504EPSS