Skip to content

Known vulnerabilities in Facebook WhatsApp Business for Android

Is your version affected?

CVE Summary Score Published
CVE-2023-38538 A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could… 5.0 Medium Oct 4, 2023
CVE-2023-38537 A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced… 5.6 Medium Oct 4, 2023
CVE-2021-24042 The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23,… 9.8 Critical Jan 4, 2022
CVE-2021-24041 A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android… Not rated Dec 7, 2021
CVE-2021-24035 A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for… Not rated Jun 11, 2021
CVE-2021-24027 A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may… Not rated Apr 6, 2021
CVE-2021-24026 A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3,… Not rated Apr 6, 2021
CVE-2020-1907 A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12,… Not rated Oct 6, 2020
CVE-2020-1906 A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could… Not rated Oct 6, 2020
CVE-2020-1902 A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or… Not rated Oct 6, 2020
CVE-2020-1894 A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20,… Not rated Sep 3, 2020
CVE-2020-1891 A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for… Not rated Sep 3, 2020
CVE-2020-1886 A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could… Not rated Sep 3, 2020
CVE-2020-1890 A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2… Not rated Sep 3, 2020
CVE-2019-11931 A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user Not rated Nov 14, 2019
CVE-2018-6350 An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers Not rated Jun 14, 2019
CVE-2018-6349 When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed… Not rated Jun 14, 2019
CVE-2018-6339 When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data… Not rated Jun 14, 2019
CVE-2019-3568 Exploited WhatsApp VOIP Stack Buffer Overflow Vulnerability 9.8 Critical May 14, 2019
CVE-2019-3566 A bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual who has taken over over a… Not rated May 10, 2019

Other Facebook products