PT-2019-11022 · Facebook · Whatsapp Business For Ios+4

Publicado 2019-06-14 · Atualizado 2025-09-03 · CVE-2018-6350

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: WhatsApp for Android versions prior to 2.18.276 WhatsApp Business for Android versions prior to 2.18.99 WhatsApp for iOS versions prior to 2.18.100.6 WhatsApp Business for iOS versions prior to 2.18.100.2 WhatsApp for Windows Phone versions prior to 2.18.224

Description: An out-of-bounds read was possible due to incorrect parsing of RTP extension headers.

Recommendations: For WhatsApp for Android versions prior to 2.18.276, update to version 2.18.276 or later. For WhatsApp Business for Android versions prior to 2.18.99, update to version 2.18.99 or later. For WhatsApp for iOS versions prior to 2.18.100.6, update to version 2.18.100.6 or later. For WhatsApp Business for iOS versions prior to 2.18.100.2, update to version 2.18.100.2 or later. For WhatsApp for Windows Phone versions prior to 2.18.224, update to version 2.18.224 or later.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2018-6350

Produtos afetados

Whatsapp Business For Android

Whatsapp Business For Ios

Whatsapp For Android

Whatsapp For Windows Phone

Whatsapp For Ios

Referências · 5

• https://facebook.com/security/advisories/cve-2018-6350 · Nota
• https://t.me/cveNotify/134214 · Publicação no Telegram
• http://securityfocus.com/bid/108803 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-6350 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-6350 · Aviso do Fabricante