PT-2020-15157 · Facebook · Whatsapp For Ios+1

Published 2020-10-06 · Updated 2020-10-19 · CVE-2020-1903

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions WhatsApp for iOS versions prior to 2.20.61 WhatsApp Business for iOS versions prior to 2.20.61

Description An issue with unzipping docx, pptx, and xlsx documents could result in an out-of-memory denial of service. The issue would require the receiver to explicitly open the attachment if it was received from a number not in the receiver's WhatsApp contacts.

Recommendations For WhatsApp for iOS versions prior to 2.20.61, update to version 2.20.61 or later. For WhatsApp Business for iOS versions prior to 2.20.61, update to version 2.20.61 or later.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2020-1903

Affected Products

Whatsapp Business For Ios

Whatsapp For Ios

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-1903 · Security Note
• https://whatsapp.com/security/advisories/2020 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1903 · Vendor Advisory