Not rated
CVE-2021-24026 A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3,…
Description
A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v2.21.3, WhatsApp for iOS prior to v2.21.32, and WhatsApp Business for iOS prior to v2.21.32 could have allowed an out-of-bounds write.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WhatsApp Business for iOS 2.21 | earliest → < 2.21.32 | 2.21.32 |
| WhatsApp for iOS 2.21 | earliest → < 2.21.32 | 2.21.32 |
| WhatsApp Business for Android 2.21 | earliest → < 2.21.3 | 2.21.3 |
| WhatsApp for Android 2.21 | earliest → < 2.21.3 | 2.21.3 |
Other CVEs of WhatsApp Business for iOS
The 15 CVEs of WhatsApp Business for iOS →
CVE-2025-55179
Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS…
5.4
Medium
CVE-2025-55177
Meta Platforms WhatsApp Incorrect Authorization Vulnerability
5.4
Medium
CVE-2023-38538
A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could…
5.0
Medium
CVE-2023-38537
A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced…
5.6
Medium