PT-2021-15657

CVE-2021-24035

·

Published

2021-06-11

·

Updated

2025-09-03

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions: WhatsApp for Android versions prior to 2.21.8.13 WhatsApp Business for Android versions prior to 2.21.8.13
Description: The issue is related to a lack of filename validation when unzipping archives, which could have allowed path traversal attacks to overwrite files.
Recommendations: For WhatsApp for Android versions prior to 2.21.8.13, update to version 2.21.8.13 or later. For WhatsApp Business for Android versions prior to 2.21.8.13, update to version 2.21.8.13 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-23: Relative Path Traversal
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2021-24035
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com