Buffer overflow in Facebook Whatsapp Business For Android
CVE-2020-1907
A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsApp Business for iOS prior to v2.20.90, and WhatsApp for Portal prior to v173.0.0…
Vulnerability class: Buffer Overflow
EPSS: 0.019 (77.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Facebook Whatsapp Business For Android — versions 2.20.196.12, unspecified
- Facebook Whatsapp Business For Ios — versions 2.20.90, unspecified
- Facebook Whatsapp For Android — versions 2.20.196.16, unspecified
- Facebook Whatsapp For Ios — versions 2.20.90, unspecified
- Facebook Whatsapp For Portal — versions 173.0.0.29.505, unspecified
- Whatsapp Whatsapp_business
Weakness classification (CWE)
References
- cve-assign@fb.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-1907?
- CVE-2020-1907 is a critical-severity vulnerability in Facebook Whatsapp Business For Android, classified under Out-of-bounds Write. CVSS score: 9.8/10. Published 2020-10-06.
- How severe is CVE-2020-1907?
- Critical severity. CVSS v3 base score is 9.8 out of 10.