Remote Code Execution Vulnerability in WhatsApp Video Processing
CVE-2022-27492

7.8HIGH

Key Information:

Vendor

Meta

Status
WhatSAPp Business For iOS
WhatSAPp For iOS
WhatSAPp For Android
WhatSAPp Business For Android
Vendor
CVE Published:
23 September 2022

What is CVE-2022-27492?

A vulnerability in WhatsApp's handling of video files could allow attackers to execute arbitrary code remotely. This arises from an integer underflow issue, where specially crafted video files can exploit this flaw. Users are encouraged to update their app to the latest version to mitigate possible security risks.

Affected Version(s)

WhatsApp Business for Android < 2.22.16.2

WhatsApp Business for iOS < unspecified

WhatsApp for Android < 2.22.16.2

References

https://www.whatsapp.com/security/advisories/2022/
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2022-27492 : Remote Code Execution Vulnerability in WhatsApp Video Processing