NetSight
critical9.8

CVE-2018-6349

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow.

Impact

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for Android prior to 2.18.248 and WhatsApp Business for Android prior to 2.18.132.

Affected products

VendorProductAffected versions
WhatsappWhatsapp
before 2.18.248
WhatsappWhatsapp Business
before 2.18.132

Weakness classification

References