A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Business for Android versions prior to 2.19.104 and Business for iOS versions prior to 2.19.100.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
WhatsApp for Android
Vendor
Facebook
Product
WhatsApp for Android
Platforms
Unknown
Default status
Unknown
WhatsApp for Android · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.19.274
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
2.19.274
Unavailable
None listed
WhatsApp for iOS
Vendor
Facebook
Product
WhatsApp for iOS
Platforms
Unknown
Default status
Unknown
WhatsApp for iOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.19.100
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
2.19.100
Unavailable
None listed
WhatsApp for Windows Phone
Vendor
Facebook
Product
WhatsApp for Windows Phone
Platforms
Unknown
Default status
Unknown
WhatsApp for Windows Phone · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Unavailable
2.18.368
None listed
WhatsApp Enterprise Client
Vendor
Facebook
Product
WhatsApp Enterprise Client
Platforms
Unknown
Default status
Unknown
WhatsApp Enterprise Client · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.25.3
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
2.25.3
Unavailable
None listed
WhatsApp Business for Android
Vendor
Facebook
Product
WhatsApp Business for Android
Platforms
Unknown
Default status
Unknown
WhatsApp Business for Android · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.19.104
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
2.19.104
Unavailable
None listed
WhatsApp Business for iOS
Vendor
Facebook
Product
WhatsApp Business for iOS
Platforms
Unknown
Default status
Unknown
WhatsApp Business for iOS · Scoped product and version facts