A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWhatsapp
APPWhatsapp< 2.21.4.18Whatsapp Business
APPWhatsapp< 2.21.4.18
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2019-3568CRITICAL9.8⚠ KEVPL ✓same product
Buffer overflow w stosie VOIP WhatsApp umożliwiający RCE
CVE-2022-36934CRITICAL9.8PL ✓same product
Integer overflow w WhatsApp umożliwiający RCE podczas połączenia wideo
CVE-2021-24043CRITICAL9.1PL ✓same product
WhatsApp — out-of-bounds heap read w parsowaniu flag RTCP
CVE-2021-24042CRITICAL9.8PL ✓same product
WhatsApp — zapis poza granicami bufora podczas połączeń 1:1
CVE-2021-24041CRITICAL9.8PL ✓same product
Przepełnienie bufora w module rozmycia obrazu WhatsApp dla Android