description: A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15.
problem types: Heap-based Buffer Overflow (CWE-122)
affected:
{
product: WhatsApp for Android
vendor: Facebook
versions:
status: affected, version: 2.19.134
lessThan: 2.19.134, status: affected, version: unspecified, versionType: custom
}
{
product: WhatsApp Business for Android
vendor: Facebook
versions:
status: affected, version: 2.19.44
lessThan: 2.19.134, status: affected, version: unspecified, versionType: custom
}
{
product: WhatsApp for iOS
vendor: Facebook
versions:
status: affected, version: 2.19.51
lessThan: 2.19.51, status: affected, version: unspecified, versionType: custom
}
{
product: WhatsApp Business for iOS
vendor: Facebook
versions:
status: affected, version: 2.19.51
lessThan: 2.19.51, status: affected, version: unspecified, versionType: custom
}
{
product: WhatsApp for Windows Phone
vendor: Facebook
versions:
status: affected, version: 2.18.348
lessThan: 2.18.348, status: affected, version: unspecified, versionType: custom
}
{
product: WhatsApp for Tizen
vendor: Facebook
versions:
status: affected, version: 2.18.15
lessThan: 2.18.15, status: affected, version: unspecified, versionType: custom
}
