Information Disclosure Vulnerability in Tencent WeChat Desktop Application

CVE-2021-27247

What is CVE-2021-27247?

An information disclosure vulnerability exists in the WXAM decoder of Tencent WeChat 2.9.5 for desktop, allowing remote attackers to potentially access sensitive user information. To exploit this vulnerability, an attacker must trick the user into visiting a malicious webpage or opening a malicious file, which invokes the flaw resulting from insufficient validation of user-supplied data. This could enable attackers to read beyond the end of an allocated buffer, presenting opportunities for further exploitation in conjunction with other vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References