Non notée
CVE-2021-24035 A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for…
Description
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WhatsApp Business for Android 2.21 | premières → < 2.21.8.13 | 2.21.8.13 |
| WhatsApp for Android 2.21 | premières → < 2.21.8.13 | 2.21.8.13 |
Autres CVE de WhatsApp Business for Android
Les 20 CVE de WhatsApp Business for Android →
CVE-2023-38538
A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could…
5.0
Moyenne
CVE-2023-38537
A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced…
5.6
Moyenne
CVE-2021-24042
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23,…
9.8
Critique
CVE-2021-24041
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android…
Non notée