Stack-Based Overflow Vulnerability in WhatsApp for Android by Facebook
CVE-2018-6349

9.8CRITICAL

Key Information:

Vendor

Facebook

Status
WhatSAPp For Android
WhatSAPp Business For Android
Vendor
CVE Published:
14 June 2019

What is CVE-2018-6349?

This vulnerability in WhatsApp for Android allows attackers to exploit a missing size check when processing user-sent packets, potentially resulting in a stack-based buffer overflow. This flaw could lead to arbitrary code execution and compromise the integrity of the application. Affected users are encouraged to update their WhatsApp to the latest version to mitigate risks.

Affected Version(s)

WhatsApp Business for Android 2.18.132

WhatsApp Business for Android < 2.18.132

WhatsApp for Android 2.18.248

References

https://www.facebook.com/security/advisories/cve-2018-6349/
x_refsource_MISC
http://www.securityfocus.com/bid/108804
vdb-entryx_refsource_BID

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2018-6349 : Stack-Based Overflow Vulnerability in WhatsApp for Android by Facebook