Non notée
CVE-2020-1905 Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp…
Description
Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have allowed a malicious third party app chosen to open the file to guess the URIs for previously opened attachments until the opener app is terminated.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WhatsApp for Android 2.20 | premières → 2.20.185 | 2.20.185 |
Autres CVE de WhatsApp for Android
Les 23 CVE de WhatsApp for Android →
CVE-2026-23866
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72…
4.3
Moyenne
CVE-2023-38538
A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could…
5.0
Moyenne
CVE-2023-38537
A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced…
5.6
Moyenne
CVE-2021-24042
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23,…
9.8
Critique