Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2023-38537

A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have resulted in app termina

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
facebook

Description

A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have resulted in app termination or unexpected control flow with very low probability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Facebook WhatsApp Desktop for Mac

Default version status: affected

  • 0 to < 2.2338.12affected

Facebook WhatsApp Desktop for Windows

Default version status: affected

  • 0 to < 2.2320.2affected

Facebook WhatsApp Business for iOS

Default version status: affected

  • 0 to < 2.23.10.77affected

Facebook WhatsApp for iOS

Default version status: affected

  • 0 to < 2.23.10.77affected

Facebook WhatsApp Business for Android

Default version status: affected

  • 0 to < 2.23.10.77affected

Facebook WhatsApp for Android

Default version status: affected

  • 0 to < 2.23.10.77affected

References