What is CVE-2020-1909?

CVE-2020-1909 is a critical-severity vulnerability in Facebook Whatsapp Business For Ios, classified under Use After Free. CVSS score: 9.8/10. Published 2020-11-03.

How severe is CVE-2020-1909?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Use After Free in Facebook Whatsapp Business For Ios

CVE-2020-1909

A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in memory corruption, crashes and potentially code execution. This could have happened only i…

Vulnerability class: Use-After-Free

EPSS: 0.022 (81.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Facebook Whatsapp Business For Ios — versions 2.20.111, unspecified, 2.20.81
Facebook Whatsapp For Ios — versions 2.20.111, unspecified, 2.20.81
Whatsapp
Whatsapp Whatsapp_business

Weakness classification (CWE)

CWE-416 — Use After Free

References

cve-assign@fb.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-1909?: CVE-2020-1909 is a critical-severity vulnerability in Facebook Whatsapp Business For Ios, classified under Use After Free. CVSS score: 9.8/10. Published 2020-11-03.
How severe is CVE-2020-1909?: Critical severity. CVSS v3 base score is 9.8 out of 10.