PT-2020-15160 · Whatsapp · Whatsapp Business For Android+1

Published 2020-10-06 · Updated 2020-10-13 · CVE-2020-1906

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions prior to 2.20.130 WhatsApp Business for Android versions prior to 2.20.46

Description A buffer overflow could occur when processing malformed local videos with E-AC-3 audio streams, potentially allowing an out-of-bounds write.

Recommendations For WhatsApp for Android versions prior to 2.20.130, update to version 2.20.130 or later. For WhatsApp Business for Android versions prior to 2.20.46, update to version 2.20.46 or later.

Fix

Heap Based Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-122

CWE-787

Related Identifiers

CVE-2020-1906

Affected Products

Whatsapp Business For Android

Whatsapp For Android

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-1906 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1906 · Vendor Advisory
• https://whatsapp.com/security/advisories/2020 · Vendor Advisory