PT-2019-11021

CVE-2018-6349

·

Publicado

2019-06-14

·

Atualizado

2025-09-03

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: WhatsApp for Android versions prior to 2.18.248 WhatsApp Business for Android versions prior to 2.18.132
Description: A missing size check when parsing a sender-provided packet allowed for a stack-based overflow, which occurs when receiving calls.
Recommendations: For WhatsApp for Android versions prior to 2.18.248, update to version 2.18.248 or later. For WhatsApp Business for Android versions prior to 2.18.132, update to version 2.18.132 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-121: Stack-based Buffer Overflow
CWE-787: Out-of-bounds Write
Identificadores relacionados
CVE-2018-6349
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com