PT-2022-23690 · Whatsapp · Whatsapp

Published 2022-09-22 · Updated 2025-09-24 · CVE-2022-36934

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WhatsApp (affected versions not specified)

Description An integer overflow in WhatsApp could result in remote code execution in an established video call. The issue affects WhatsApp mobile apps.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Integer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

CWE-190

CWE-122

Related Identifiers

CVE-2022-36934

Affected Products

Whatsapp

References · 22

• https://nvd.nist.gov/vuln/detail/CVE-2022-36934 · Security Note
• https://whatsapp.com/security/advisories/2022 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-36934 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/6887 · Telegram Post
• https://t.me/malwr/6278 · Telegram Post
• https://t.me/secharvester/12937 · Telegram Post
• https://t.me/cveNotify/136341 · Telegram Post
• https://t.me/cvenotify/36731 · Telegram Post
• https://twitter.com/MadPumpkinCorp/status/1695692624009605423 · Twitter Post
• https://t.me/cvenotify/36776 · Telegram Post
• https://t.me/echeloneyes/724 · Telegram Post
• https://t.me/irozysk/11624 · Telegram Post
• https://twitter.com/eepyware/status/1961886228388704566 · Twitter Post
• https://t.me/freedomf0x/17682 · Telegram Post
• https://t.me/ckure/11821 · Telegram Post