CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2018-6350

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0610%
EPSS Percentile8.04th
Published2019年6月14日
Last Modified2025年9月3日

Vulnerability Description

An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, WhatsApp Business for Android prior to 2.18.99, WhatsApp for iOS prior to 2.18.100.6, WhatsApp Business for iOS prior to 2.18.100.2, and WhatsApp for Windows Phone prior to 2.18.224.

Affected Platforms (CPE)

📦
Whatsapp

Whatsapp

< 2.18.99
📦
Whatsapp

Whatsapp

< 2.18.100.6
📦
Whatsapp

Whatsapp

< 2.18.224
📦
Whatsapp

Whatsapp Business

< 2.18.100.2
📦
Whatsapp

Whatsapp Business

< 2.18.276

References & Advisories

🔗 http://www.securityfocus.com/bid/108803
🔗 https://www.facebook.com/security/advisories/cve-2018-6350/
🔗 http://www.securityfocus.com/bid/108803
🔗 https://www.facebook.com/security/advisories/cve-2018-6350/

相關漏洞威脅

CVE-2020-188910.0

A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron ...

CVE-2018-63399.8

When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed ...

CVE-2018-63499.8

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-ba...

CVE-2018-206559.8

When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based ...