Out-of-bounds Read in Facebook Whatsapp Business For Android
CVE-2018-6350
An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, WhatsApp Business for Android prior to 2.18.99, WhatsApp for iOS prior to 2.18.100…
Vulnerability class: Buffer Overflow
EPSS: 0.004 (61.8th percentile) — read the EPSS interpretation.
Affected products
- Facebook Whatsapp Business For Android — versions 2.18.99, unspecified
- Facebook Whatsapp Business For Ios — versions 2.18.100.2, unspecified
- Facebook Whatsapp For Android — versions 2.18.276, unspecified
- Facebook Whatsapp For Ios — versions 2.18.100.6, unspecified
- Facebook Whatsapp For Windows Phone — versions 2.18.224, unspecified
Weakness classification (CWE)
References
- www.facebook.com/security/advisories/cve-2018-6350/ (x_refsource_MISC)
- 108803 (vdb-entry, x_refsource_BID)