PT-2020-15163

CVE-2020-1909

·

Published

2020-11-03

·

Updated

2020-11-06

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions WhatsApp for iOS versions prior to 2.20.111 WhatsApp Business for iOS versions prior to 2.20.111
Description A use-after-free issue in the logging library could result in memory corruption, crashes, and potentially code execution. This issue could occur when receiving an animated sticker while placing a WhatsApp video call on hold, provided several specific events happened in sequence.
Recommendations For WhatsApp for iOS versions prior to 2.20.111, update to version 2.20.111 or later. For WhatsApp Business for iOS versions prior to 2.20.111, update to version 2.20.111 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾