Not rated
CVE-2018-20655 When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a…
Description
When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for iOS prior to v2.18.90.24 and WhatsApp Business for iOS prior to v2.18.90.24.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WhatsApp for iOS 2.18 | earliest → 2.18.90.24 | 2.18.90.24 |
| WhatsApp Business for iOS 2.18 | earliest → 2.18.90.24 | 2.18.90.24 |
Other CVEs of WhatsApp for iOS
The 19 CVEs of WhatsApp for iOS →
CVE-2026-23866
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72…
4.3
Medium
CVE-2025-55179
Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS…
5.4
Medium
CVE-2025-55177
Meta Platforms WhatsApp Incorrect Authorization Vulnerability
5.4
Medium
CVE-2023-38538
A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could…
5.0
Medium