Riskcovery

CVE-2020-1894

State
Published
Severity
Not scored
Published
Sep 3, 2020
Updated
Aug 4, 2024
Reserved
Dec 2, 2019

Read the record on cve.org

Description

A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.20.30 could have allowed arbitrary code execution when playing a specially crafted push to talk message.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-787 Out-of-bounds Write (CWE-787)

Affected Products

ProductVersions
WhatsApp AndroidFacebook
  • 2.20.35Affected
  • before 2.20.35Affected
WhatsApp Business for AndroidFacebook
  • 2.20.20Affected
  • before 2.20.20Affected
WhatsApp iPhoneFacebook
  • 2.20.30Affected
  • before 2.20.30Affected
WhatsApp Business for iPhoneFacebook
  • 2.20.30Affected
  • before 2.20.30Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.