Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-6339

When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An off-by-one error meant that data was writte

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
facebook

Description

When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An off-by-one error meant that data was written beyond the allocated space on the stack. This issue affects WhatsApp for Android starting in version 2.18.180 and was fixed in version 2.18.295. It also affects WhatsApp Business for Android starting in version v2.18.103 and was fixed in version v2.18.150.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Facebook WhatsApp for Android

  • 2.18.295affected
  • 2.18.180 to < unspecifiedaffected
  • unspecified to < 2.18.180unaffected

Facebook WhatsApp Business for Android

  • 2.18.150affected
  • 2.18.103 to < unspecifiedaffected
  • unspecified to < 2.18.103unaffected

References