Whatsapp Whatsapp_business

27 CVEs affecting Whatsapp Whatsapp_business. Latest disclosed: 2025-11-18. Critical: 13, High: 8.

Top CVEs affecting Whatsapp Whatsapp_business
CVESeverityScorePublishedSummary
CVE-2022-36934Critical9.82022-09-22An integer overflow in WhatsApp could result in remote code execution in an established video call.
CVE-2021-24041Critical9.82021-12-07A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-o…
CVE-2021-24026Critical9.82021-04-06A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v…
CVE-2020-1909Critical9.82020-11-03A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in memory cor…
CVE-2020-1907Critical9.82020-10-06A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsA…
CVE-2020-1891Critical9.82020-09-03A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone p…
CVE-2018-6350Critical9.82019-06-14An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, Wh…
CVE-2018-6349Critical9.82019-06-14When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affe…
CVE-2018-6339Critical9.82019-06-14When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An off-by-one error meant…
CVE-2018-20655Critical9.82019-06-14When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects…
CVE-2019-3568Critical9.82019-05-14A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number…
CVE-2021-24043Critical9.12022-02-02A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230…
CVE-2021-24035Critical9.12021-06-11A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed…
CVE-2020-1894High8.82020-09-03A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and W…
CVE-2020-1886High8.82020-09-03A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a…
CVE-2020-1910High7.82021-02-02A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed out-of-bounds read…
CVE-2020-1906High7.82020-10-06A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could have allowed an out-of-bounds write when…
CVE-2019-11931High7.82019-11-14A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the e…
CVE-2021-24027High7.52021-04-06A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to…
CVE-2020-1902High7.52020-10-06A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35…