Buffer Overflow in WhatsApp for Android and WhatsApp Business
CVE-2020-1886

8.8HIGH

Key Information:

Vendor

Facebook

Status
WhatSAPp For Android
WhatSAPp Business For Android
Vendor
CVE Published:
3 September 2020

What is CVE-2020-1886?

A vulnerability exists in WhatsApp for Android and WhatsApp Business for Android due to a buffer overflow that can be triggered by a specially crafted video stream. When the affected apps receive and respond to a malicious video call, this flaw could allow an attacker to execute an out-of-bounds write, potentially leading to unauthorized access or control over the application.

Affected Version(s)

WhatsApp Business for Android 2.20.2

WhatsApp Business for Android < 2.20.2

WhatsApp for Android 2.20.11

References

https://www.whatsapp.com/security/advisories/2020
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.