A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230.6, WhatsApp Business for iOS 2.21.230.7, and WhatsApp Desktop v2.2145.0 could have allowed an out-of-bounds heap read if a user sent a malformed RTCP packet during an established call.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HWhatsapp
APPWhatsapp2.21.230.62.21.23.22.2145.0Whatsapp Business
APPWhatsapp2.21.230.72.21.23.2
Related vulnerabilities
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted ser...
An integer overflow in WhatsApp could result in remote code execution in an established video call.
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23,...
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business f...
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Bu...