PT-2018-17492 · Whatsapp · Whatsapp For Android+2

Natalie Silvanovich · Published 2018-12-31 · Updated 2025-05-06 · CVE-2018-6344

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions prior to 2.18.293 WhatsApp for iOS versions prior to 2.18.93 WhatsApp for Windows Phone versions prior to 2.18.172

Description A heap corruption issue can occur in WhatsApp due to a malformed RTP packet being sent after a call is established, potentially causing denial of service.

Recommendations For WhatsApp for Android versions prior to 2.18.293, update to version 2.18.293 or later. For WhatsApp for iOS versions prior to 2.18.93, update to version 2.18.93 or later. For WhatsApp for Windows Phone versions prior to 2.18.172, update to version 2.18.172 or later.

Exploit

Fix

DoS

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

CVE-2018-6344

Affected Products

Whatsapp For Android

Whatsapp For Windows Phone

Whatsapp For Ios

References · 5

• 🔥 https://googleprojectzero.blogspot.com/2018/12/adventures-in-video-conferencing-part-3.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-6344 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6344 · Vendor Advisory
• http://securityfocus.com/bid/106365 · Note
• https://t.me/cvenotify/121018 · Telegram Post