PT-2020-15161
CVE-2020-1907
·
Published
2020-10-06
·
Updated
2020-10-15
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
WhatsApp for Android versions prior to 2.20.196.16
WhatsApp Business for Android versions prior to 2.20.196.12
WhatsApp for iOS versions prior to 2.20.90
WhatsApp Business for iOS versions prior to 2.20.90
WhatsApp for Portal versions prior to 173.0.0.29.505
Description
A stack overflow could have allowed arbitrary code execution when parsing the contents of an RTP Extension header.
Recommendations
For WhatsApp for Android versions prior to 2.20.196.16, update to version 2.20.196.16 or later.
For WhatsApp Business for Android versions prior to 2.20.196.12, update to version 2.20.196.12 or later.
For WhatsApp for iOS versions prior to 2.20.90, update to version 2.20.90 or later.
For WhatsApp Business for iOS versions prior to 2.20.90, update to version 2.20.90 or later.
For WhatsApp for Portal versions prior to 173.0.0.29.505, update to version 173.0.0.29.505 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾