What is CVE-2020-1903?

CVE-2020-1903 is a medium-severity vulnerability in Facebook Whatsapp Business For Ios, classified under Uncontrolled Resource Consumption. CVSS score: 5.5/10. Published 2020-10-06.

How severe is CVE-2020-1903?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Resource exhaustion in Facebook Whatsapp Business For Ios

CVE-2020-1903

An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have resulted in an out-of-memory denial of service. This issue would have required the rece…

Vulnerability class: DoS (Denial of Service)

EPSS: 0.007 (47.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H.

Affected products

Facebook Whatsapp Business For Ios — versions 2.20.61, unspecified
Facebook Whatsapp For Ios — versions 2.20.61, unspecified
Whatsapp
Whatsapp Whatsapp_business

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

cve-assign@fb.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-1903?: CVE-2020-1903 is a medium-severity vulnerability in Facebook Whatsapp Business For Ios, classified under Uncontrolled Resource Consumption. CVSS score: 5.5/10. Published 2020-10-06.
How severe is CVE-2020-1903?: Medium severity. CVSS v3 base score is 5.5 out of 10.