Riskcovery

CVE-2020-1891

State
Published
Severity
Not scored
Published
Sep 3, 2020
Updated
Aug 4, 2024
Reserved
Dec 2, 2019

Read the record on cve.org

Description

A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20, and WhatsApp Business for iPhone prior to v2.20.20 could have allowed an out-of-bounds write on 32-bit devices.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-787 Out-of-bounds Write (CWE-787)

Affected Products

ProductVersions
WhatsApp AndroidFacebook
  • 2.20.17Affected
  • before 2.20.17Affected
WhatsApp Business for AndroidFacebook
  • 2.20.7Affected
  • before 2.20.7Affected
WhatsApp iPhoneFacebook
  • 2.20.20Affected
  • before 2.20.20Affected
WhatsApp Business for iPhoneFacebook
  • 2.20.20Affected
  • before 2.20.20Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.