Denial of Service in WhatsApp for iOS Product by WhatsApp Inc.
CVE-2020-1901

5.3MEDIUM

Key Information:

Vendor

Facebook

Status
WhatSAPp For iOS
Vendor
CVE Published:
6 October 2020

What is CVE-2020-1901?

A vulnerability in WhatsApp for iOS allows an attacker to send a specially crafted large text message that can cause the application to freeze while processing the message. This impacts user experience and can lead to service disruption for those who receive such messages.

Affected Version(s)

WhatsApp for iOS 2.20.91.4

WhatsApp for iOS < 2.20.91.4

References

https://www.whatsapp.com/security/advisories/2020/
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.