Not rated
CVE-2020-1908 Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could…
Description
Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WhatsApp Business for iOS 2.20 | earliest → 2.20.100 | 2.20.100 |
| WhatsApp for iOS 2.20 | earliest → 2.20.100 | 2.20.100 |
Other CVEs of WhatsApp Business for iOS
The 15 CVEs of WhatsApp Business for iOS →
CVE-2025-55179
Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS…
5.4
Medium
CVE-2025-55177
Meta Platforms WhatsApp Incorrect Authorization Vulnerability
5.4
Medium
CVE-2023-38538
A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could…
5.0
Medium
CVE-2023-38537
A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced…
5.6
Medium