NetSight
critical9.8

CVE-2018-20655

When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow.

Impact

When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for iOS prior to v2.18.90.24 and WhatsApp Business for iOS prior to v2.18.90.24.

Affected products

VendorProductAffected versions
WhatsappWhatsapp
before 2.18.90.24
WhatsappWhatsapp Business
before 2.18.90.24

Weakness classification

References