PT-2020-15150
CVE-2020-1894
·
Published
2020-09-03
·
Updated
2020-09-11
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
WhatsApp for Android versions prior to 2.20.35
WhatsApp Business for Android versions prior to 2.20.20
WhatsApp for iPhone versions prior to 2.20.30
WhatsApp Business for iPhone versions prior to 2.20.30
Description
A stack write overflow could have allowed arbitrary code execution when playing a specially crafted push to talk message.
Recommendations
For WhatsApp for Android versions prior to 2.20.35, update to version 2.20.35 or later.
For WhatsApp Business for Android versions prior to 2.20.20, update to version 2.20.20 or later.
For WhatsApp for iPhone versions prior to 2.20.30, update to version 2.20.30 or later.
For WhatsApp Business for iPhone versions prior to 2.20.30, update to version 2.20.30 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾