CRITICAL🇵🇱 Wersja polska

CVE-2021-24042

CVSS 9.8v3.1pub. 2022-01-04upd. 2025-05-22

The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp Desktop prior to v2.2146 could have allowed an out-of-bounds write if a user makes a 1:1 call to a malicious actor.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Whatsapp

    APP
    Whatsapp
    < 2.21.23< 2.21.230< 2.2143< 2.2146
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2019-3568CRITICAL9.8⚠ KEVPL ✓same product

Buffer overflow w stosie VOIP WhatsApp umożliwiający RCE

CVE-2022-36934CRITICAL9.8PL ✓same product

Integer overflow w WhatsApp umożliwiający RCE podczas połączenia wideo

CVE-2021-24043CRITICAL9.1PL ✓same product

WhatsApp — out-of-bounds heap read w parsowaniu flag RTCP

CVE-2021-24041CRITICAL9.8PL ✓same product

Przepełnienie bufora w module rozmycia obrazu WhatsApp dla Android

CVE-2021-24035CRITICAL9.1PL ✓same product

Path Traversal przy rozpakowywaniu archiwów w WhatsApp dla Android