description: A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malformed data to load an image from a sender-controlled URL without user interaction.
problem types: CWE-20: Improper Input Validation
affected:
{
product: WhatsApp for Android
vendor: Facebook
versions:
status: affected, version: 2.20.11
lessThan: 2.20.11, status: affected, version: unspecified, versionType: custom
}
{
product: WhatsApp Business for Android
vendor: Facebook
versions:
status: affected, version: 2.20.2
lessThan: 2.20.2, status: affected, version: unspecified, versionType: custom
}
