Not rated
CVE-2020-1904 A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have…
Description
A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal overwriting files when sending specially crafted docx, xlsx, and pptx files as attachments to messages.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WhatsApp for iOS 2.20 | earliest → 2.20.61 | 2.20.61 |
| WhatsApp Business for iOS 2.20 | earliest → 2.20.61 | 2.20.61 |
Other CVEs of WhatsApp for iOS
The 19 CVEs of WhatsApp for iOS →
CVE-2026-23866
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72…
4.3
Medium
CVE-2025-55179
Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS…
5.4
Medium
CVE-2025-55177
Meta Platforms WhatsApp Incorrect Authorization Vulnerability
5.4
Medium
CVE-2023-38538
A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could…
5.0
Medium