description: A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app termination or unexpected control flow with very low probability.
problem types: CWE-416, CWE-366
affected:
{
defaultStatus: affected
product: WhatsApp Desktop for Mac
vendor: Facebook
versions:
lessThan: 2.2338.12, status: affected, version: 0, versionType: semver
}
{
defaultStatus: affected
product: WhatsApp Desktop for Windows
vendor: Facebook
versions:
lessThan: 2.2320.2, status: affected, version: 0, versionType: semver
}
{
defaultStatus: affected
product: WhatsApp Business for iOS
vendor: Facebook
versions:
lessThan: 2.23.10.77, status: affected, version: 0, versionType: semver
}
{
defaultStatus: affected
product: WhatsApp for iOS
vendor: Facebook
versions:
lessThan: 2.23.10.77, status: affected, version: 0, versionType: semver
}
{
defaultStatus: affected
product: WhatsApp Business for Android
vendor: Facebook
versions:
lessThan: 2.23.10.77, status: affected, version: 0, versionType: semver
}
{
defaultStatus: affected
product: WhatsApp for Android
vendor: Facebook
versions:
lessThan: 2.23.10.77, status: affected, version: 0, versionType: semver
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
baseScore: 5
baseSeverity: MEDIUM
]