PT-2019-11019

CVE-2018-6339

·

Published

2019-06-14

·

Updated

2025-09-03

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: WhatsApp for Android versions 2.18.180 through 2.18.294 WhatsApp Business for Android versions 2.18.103 through 2.18.149
Description: The issue arises from a stack allocation failure when receiving calls using WhatsApp on Android, specifically due to an off-by-one error that causes data to be written beyond the allocated space on the stack.
Recommendations: For WhatsApp for Android versions 2.18.180 through 2.18.294, update to version 2.18.295 or later. For WhatsApp Business for Android versions 2.18.103 through 2.18.149, update to version 2.18.150 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-121: Stack-based Buffer Overflow
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2018-6339
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com