5.6
Medium
CVE-2023-38537 A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced…
Description
A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have resulted in app termination or unexpected control flow with very low probability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WhatsApp Desktop for Mac 2.2338 | earliest → < 2.2338.12 | 2.2338.12 |
| WhatsApp Desktop for Windows 2.2320 | earliest → < 2.2320.2 | 2.2320.2 |
| WhatsApp Business for iOS 2.23 | earliest → < 2.23.10.77 | 2.23.10.77 |
| WhatsApp for iOS 2.23 | earliest → < 2.23.10.77 | 2.23.10.77 |
| WhatsApp Business for Android 2.23 | earliest → < 2.23.10.77 | 2.23.10.77 |
| WhatsApp for Android 2.23 | earliest → < 2.23.10.77 | 2.23.10.77 |
Other CVEs of WhatsApp Desktop for Mac
The 4 CVEs of WhatsApp Desktop for Mac →
CVE-2025-55179
Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS…
5.4
Medium
CVE-2025-55177
Meta Platforms WhatsApp Incorrect Authorization Vulnerability
5.4
Medium
CVE-2023-38538
A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could…
5.0
Medium