The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp Desktop prior to v2.2146 could have allowed an out-of-bounds write if a user makes a 1:1 call to a malicious actor.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
WhatsApp Desktop
Vendor
Facebook
Product
WhatsApp Desktop
Platforms
Unknown
Default status
Unknown
WhatsApp Desktop · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
v2.2146
Unavailable
None listed
v2.2146
unaffected
custom
unspecified
Unavailable
None listed
WhatsApp for KaiOS
Vendor
Facebook
Product
WhatsApp for KaiOS
Platforms
Unknown
Default status
Unknown
WhatsApp for KaiOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
v2.2143
Unavailable
None listed
v2.2143
unaffected
custom
unspecified
Unavailable
None listed
WhatsApp Business for iOS
Vendor
Facebook
Product
WhatsApp Business for iOS
Platforms
Unknown
Default status
Unknown
WhatsApp Business for iOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
v2.21.230
Unavailable
None listed
v2.21.230
unaffected
custom
unspecified
Unavailable
None listed
WhatsApp for iOS
Vendor
Facebook
Product
WhatsApp for iOS
Platforms
Unknown
Default status
Unknown
WhatsApp for iOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
v2.21.230
Unavailable
None listed
v2.21.230
unaffected
custom
unspecified
Unavailable
None listed
WhatsApp Business for Android
Vendor
Facebook
Product
WhatsApp Business for Android
Platforms
Unknown
Default status
Unknown
WhatsApp Business for Android · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
v2.21.23
Unavailable
None listed
v2.21.23
unaffected
custom
unspecified
Unavailable
None listed
WhatsApp for Android
Vendor
Facebook
Product
WhatsApp for Android
Platforms
Unknown
Default status
Unknown
WhatsApp for Android · Scoped product and version facts