PT-2020-15142 · Facebook · Whatsapp For Android+1

Published 2020-09-03 · Updated 2020-09-11 · CVE-2020-1886

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions prior to 2.20.11 WhatsApp Business for Android versions prior to 2.20.2

Description A buffer overflow could have allowed an out-of-bounds write via a specially crafted video stream after receiving and answering a malicious video call.

Recommendations For WhatsApp for Android versions prior to 2.20.11, update to version 2.20.11 or later. For WhatsApp Business for Android versions prior to 2.20.2, update to version 2.20.2 or later.

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-120

CWE-787

Related Identifiers

CVE-2020-1886

Affected Products

Whatsapp Business For Android

Whatsapp For Android

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-1886 · Security Note
• https://whatsapp.com/security/advisories/2020 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1886 · Vendor Advisory