PT-2018-17492 · Whatsapp · Whatsapp For Android+2

Natalie Silvanovich · CVE-2018-6344 · Publicado 2018-12-31 · Atualizado 2025-05-06

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions prior to 2.18.293 WhatsApp for iOS versions prior to 2.18.93 WhatsApp for Windows Phone versions prior to 2.18.172

Description A heap corruption issue can occur in WhatsApp due to a malformed RTP packet being sent after a call is established, potentially causing denial of service.

Recommendations For WhatsApp for Android versions prior to 2.18.293, update to version 2.18.293 or later. For WhatsApp for iOS versions prior to 2.18.93, update to version 2.18.93 or later. For WhatsApp for Windows Phone versions prior to 2.18.172, update to version 2.18.172 or later.

Exploit

Correção

DoS

Memory Corruption

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-122

Identificadores relacionados

CVE-2018-6344

Produtos afetados

Whatsapp For Android

Whatsapp For Windows Phone

Whatsapp For Ios

Referências · 5

• 🔥 https://googleprojectzero.blogspot.com/2018/12/adventures-in-video-conferencing-part-3.html · Exploit
• http://securityfocus.com/bid/106365 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-6344 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-6344 · Aviso do Fabricante
• https://t.me/cvenotify/121018 · Publicação no Telegram