CVE-2018-6339

State: Published
Severity: Not scored
Published: Jun 14, 2019
Updated: Aug 5, 2024
Reserved: Jan 26, 2018

Description

When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An off-by-one error meant that data was written beyond the allocated space on the stack. This issue affects WhatsApp for Android starting in version 2.18.180 and was fixed in version 2.18.295. It also affects WhatsApp Business for Android starting in version v2.18.103 and was fixed in version v2.18.150.

Scores

The record has no CVSS score.

Weaknesses

CWE-121 Stack-based Buffer Overflow (CWE-121)

Affected Products

Product	Versions
WhatsApp for AndroidFacebook	2.18.295Affected 2.18.180 to before unspecifiedAffected before 2.18.180Not affected
WhatsApp Business for AndroidFacebook	2.18.150Affected 2.18.103 to before unspecifiedAffected before 2.18.103Not affected

References

https://www.facebook.com/security/advisories/cve-2018-6339/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.