A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
WhatsApp for Android
Vendor
Facebook
Product
WhatsApp for Android
Platforms
Unknown
Default status
Unknown
WhatsApp for Android · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.19.134
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
2.19.134
Unavailable
None listed
WhatsApp Business for Android
Vendor
Facebook
Product
WhatsApp Business for Android
Platforms
Unknown
Default status
Unknown
WhatsApp Business for Android · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.19.44
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
2.19.134
Unavailable
None listed
WhatsApp for iOS
Vendor
Facebook
Product
WhatsApp for iOS
Platforms
Unknown
Default status
Unknown
WhatsApp for iOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.19.51
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
2.19.51
Unavailable
None listed
WhatsApp Business for iOS
Vendor
Facebook
Product
WhatsApp Business for iOS
Platforms
Unknown
Default status
Unknown
WhatsApp Business for iOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.19.51
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
2.19.51
Unavailable
None listed
WhatsApp for Windows Phone
Vendor
Facebook
Product
WhatsApp for Windows Phone
Platforms
Unknown
Default status
Unknown
WhatsApp for Windows Phone · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.18.348
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
2.18.348
Unavailable
None listed
WhatsApp for Tizen
Vendor
Facebook
Product
WhatsApp for Tizen
Platforms
Unknown
Default status
Unknown
WhatsApp for Tizen · Scoped product and version facts