CRITICAL🇵🇱 Wersja polska

CVE-2021-24042

CVSS 9.8v3.1pub. 2022-01-04upd. 2025-05-22

The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp Desktop prior to v2.2146 could have allowed an out-of-bounds write if a user makes a 1:1 call to a malicious actor.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Whatsapp

    APP
    Whatsapp
    < 2.21.23< 2.21.230< 2.2143< 2.2146
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2019-3568CRITICAL9.8⚠ KEVten sam produkt

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted ser...

CVE-2022-36934CRITICAL9.8ten sam produkt

An integer overflow in WhatsApp could result in remote code execution in an established video call.

CVE-2021-24043CRITICAL9.1ten sam produkt

A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business fo...

CVE-2021-24041CRITICAL9.8ten sam produkt

A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business f...

CVE-2021-24035CRITICAL9.1ten sam produkt

A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Bu...