A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HWhatsapp
APPWhatsapp< 2.21.8.13Whatsapp Business
APPWhatsapp< 2.21.8.13
Related vulnerabilities
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted ser...
An integer overflow in WhatsApp could result in remote code execution in an established video call.
A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business fo...
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23,...
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business f...