PT-2019-11021 · Facebook · Whatsapp For Android+1

Publicado 2019-06-14 · Atualizado 2025-09-03 · CVE-2018-6349

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: WhatsApp for Android versions prior to 2.18.248 WhatsApp Business for Android versions prior to 2.18.132

Description: A missing size check when parsing a sender-provided packet allowed for a stack-based overflow, which occurs when receiving calls.

Recommendations: For WhatsApp for Android versions prior to 2.18.248, update to version 2.18.248 or later. For WhatsApp Business for Android versions prior to 2.18.132, update to version 2.18.132 or later.

Correção

Stack Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-121

CWE-787

Identificadores relacionados

CVE-2018-6349

Produtos afetados

Whatsapp Business For Android

Whatsapp For Android

Referências · 5

• http://securityfocus.com/bid/108804 · Nota
• https://t.me/cveNotify/134213 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2018-6349 · Aviso do Fabricante
• https://facebook.com/security/advisories/cve-2018-6349 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-6349 · Nota de Segurança