An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, WhatsApp Business for Android prior to 2.18.99, WhatsApp for iOS prior to 2.18.100.6, WhatsApp Business for iOS prior to 2.18.100.2, and WhatsApp for Windows Phone prior to 2.18.224.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
WhatsApp for Android
Vendor
Facebook
Product
WhatsApp for Android
Platforms
Unknown
Default status
Unknown
WhatsApp for Android · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.18.276
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
2.18.276
Unavailable
None listed
WhatsApp Business for Android
Vendor
Facebook
Product
WhatsApp Business for Android
Platforms
Unknown
Default status
Unknown
WhatsApp Business for Android · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.18.99
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
2.18.99
Unavailable
None listed
WhatsApp for iOS
Vendor
Facebook
Product
WhatsApp for iOS
Platforms
Unknown
Default status
Unknown
WhatsApp for iOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.18.100.6
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
2.18.100.6
Unavailable
None listed
WhatsApp Business for iOS
Vendor
Facebook
Product
WhatsApp Business for iOS
Platforms
Unknown
Default status
Unknown
WhatsApp Business for iOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.18.100.2
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
2.18.100.2
Unavailable
None listed
WhatsApp for Windows Phone
Vendor
Facebook
Product
WhatsApp for Windows Phone
Platforms
Unknown
Default status
Unknown
WhatsApp for Windows Phone · Scoped product and version facts