PT-2020-15163
CVE-2020-1909
·
Published
2020-11-03
·
Updated
2020-11-06
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
WhatsApp for iOS versions prior to 2.20.111
WhatsApp Business for iOS versions prior to 2.20.111
Description
A use-after-free issue in the logging library could result in memory corruption, crashes, and potentially code execution. This issue could occur when receiving an animated sticker while placing a WhatsApp video call on hold, provided several specific events happened in sequence.
Recommendations
For WhatsApp for iOS versions prior to 2.20.111, update to version 2.20.111 or later.
For WhatsApp Business for iOS versions prior to 2.20.111, update to version 2.20.111 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾