| CVE-2026-23866 |
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72…
|
4.3
Medium
|
May 1, 2026 |
| CVE-2023-38538 |
A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could…
|
5.0
Medium
|
Oct 4, 2023 |
| CVE-2023-38537 |
A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced…
|
5.6
Medium
|
Oct 4, 2023 |
| CVE-2021-24042 |
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23,…
|
9.8
Critical
|
Jan 4, 2022 |
| CVE-2021-24041 |
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android…
|
Not rated
|
Dec 7, 2021 |
| CVE-2021-24035 |
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for…
|
Not rated
|
Jun 11, 2021 |
| CVE-2021-24027 |
A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may…
|
Not rated
|
Apr 6, 2021 |
| CVE-2021-24026 |
A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3,…
|
Not rated
|
Apr 6, 2021 |
| CVE-2020-1907 |
A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12,…
|
Not rated
|
Oct 6, 2020 |
| CVE-2020-1906 |
A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could…
|
Not rated
|
Oct 6, 2020 |
| CVE-2020-1905 |
Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp…
|
Not rated
|
Oct 6, 2020 |
| CVE-2020-1902 |
A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or…
|
Not rated
|
Oct 6, 2020 |
| CVE-2020-1886 |
A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could…
|
Not rated
|
Sep 3, 2020 |
| CVE-2020-1890 |
A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2…
|
Not rated
|
Sep 3, 2020 |
| CVE-2019-11931 |
A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user
|
Not rated
|
Nov 14, 2019 |
| CVE-2019-11933 |
A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version…
|
Not rated
|
Oct 23, 2019 |
| CVE-2019-11927 |
An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on…
|
Not rated
|
Sep 27, 2019 |
| CVE-2018-6350 |
An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers
|
Not rated
|
Jun 14, 2019 |
| CVE-2018-6349 |
When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed…
|
Not rated
|
Jun 14, 2019 |
| CVE-2018-6339 |
When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data…
|
Not rated
|
Jun 14, 2019 |
| CVE-2019-3568 |
Exploited
WhatsApp VOIP Stack Buffer Overflow Vulnerability
|
9.8
Critical
|
May 14, 2019 |
| CVE-2019-3566 |
A bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual who has taken over over a…
|
Not rated
|
May 10, 2019 |
| CVE-2018-6344 |
A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established
|
7.5
High
|
Dec 31, 2018 |