CVE-2020-1910 — Out-of-bounds Write in Business FOR Android

CWE-787 — Out-of-bounds Write3 documents3 sources
Severity
7.8HIGHNVD
EPSS
2.9%
top 13.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Whatsapp Business FOR AndroidWhatsapp FOR AndroidWhatsapp+1 more
Timeline
PublishedFeb 2
Latest updateMay 24

Description

A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed out-of-bounds read and write if a user applied specific image filters to a specially crafted image and sent the resulting image.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶CVEListV5whatsapp/whatsapp_business_for_androidunspecified — v2.21.1.13
▶CVEListV5whatsapp/whatsapp_for_androidunspecified — v2.21.1.13
▶NVDwhatsapp/whatsapp< 2.21.1.13

🔴Vulnerability Details

2
GHSA
GHSA-xwv3-xrx8-63rf: A missing bounds check in WhatsApp for Android prior to v2↗2022-05-24
▶
CVEList
CVE-2020-1910: A missing bounds check in WhatsApp for Android prior to v2↗2021-02-02
▶
CVE-2020-1910 — Out-of-bounds Write | cvebase