Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-6350

An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, WhatsApp Business for A

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
facebook

Description

An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, WhatsApp Business for Android prior to 2.18.99, WhatsApp for iOS prior to 2.18.100.6, WhatsApp Business for iOS prior to 2.18.100.2, and WhatsApp for Windows Phone prior to 2.18.224.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Facebook WhatsApp for Android

  • 2.18.276affected
  • unspecified to < 2.18.276affected

Facebook WhatsApp Business for Android

  • 2.18.99affected
  • unspecified to < 2.18.99affected

Facebook WhatsApp for iOS

  • 2.18.100.6affected
  • unspecified to < 2.18.100.6affected

Facebook WhatsApp Business for iOS

  • 2.18.100.2affected
  • unspecified to < 2.18.100.2affected

Facebook WhatsApp for Windows Phone

  • 2.18.224affected
  • unspecified to < 2.18.224affected

References