Out-of-Bounds Read Vulnerability in WhatsApp for Multiple Platforms
CVE-2018-6350

9.8CRITICAL

Key Information:

Vendor

Facebook

Status
WhatSAPp For Android
WhatSAPp Business For Android
WhatSAPp For iOS
WhatSAPp Business For iOS
Vendor
CVE Published:
14 June 2019

What is CVE-2018-6350?

An out-of-bounds read vulnerability exists in WhatsApp due to improper parsing of RTP extension headers. This flaw can lead to unexpected behaviors and potential exposure to sensitive information. Users on various platforms, including Android, iOS, and Windows Phone, are urged to update their applications to the latest versions to mitigate any security risks. Specific affected versions include WhatsApp for Android before 2.18.276, WhatsApp Business for Android before 2.18.99, WhatsApp for iOS before 2.18.100.6, WhatsApp Business for iOS before 2.18.100.2, and WhatsApp for Windows Phone before 2.18.224. For more details, visit the official advisories.

Affected Version(s)

WhatsApp Business for Android 2.18.99

WhatsApp Business for Android < 2.18.99

WhatsApp Business for iOS 2.18.100.2

References

https://www.facebook.com/security/advisories/cve-2018-6350/
x_refsource_MISC
http://www.securityfocus.com/bid/108803
vdb-entryx_refsource_BID

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2018-6350 : Out-of-Bounds Read Vulnerability in WhatsApp for Multiple Platforms