Not rated
CVE-2021-24035 A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for…
Description
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WhatsApp Business for Android 2.21 | earliest → < 2.21.8.13 | 2.21.8.13 |
| WhatsApp for Android 2.21 | earliest → < 2.21.8.13 | 2.21.8.13 |
Other CVEs of WhatsApp Business for Android
The 20 CVEs of WhatsApp Business for Android →
CVE-2023-38538
A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could…
5.0
Medium
CVE-2023-38537
A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced…
5.6
Medium
CVE-2021-24042
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23,…
9.8
Critical
CVE-2021-24041
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android…
Not rated