CVE-2018-20655
When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for iOS prior to v2.18.90.24 and WhatsApp Business for iOS prior to v2.18.90.24.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cve-assign@fb.com
- Published
- 2019-06-14
- Last modified
- 2024-08-05
- Weaknesses
- CWE-121, CWE-787
Affected products
- Whatsapp Business For Ios (Facebook)
- Whatsapp For Ios (Facebook)
- Whatsapp (Whatsapp)
- Whatsapp Business (Whatsapp)
References
- http://www.securityfocus.com/bid/108805
- https://www.facebook.com/security/advisories/cve-2018-20655/
