NetSight
critical9.1

CVE-2021-24035

A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed …

Impact

A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.

Affected products

VendorProductAffected versions
WhatsappWhatsapp
before 2.21.8.13
WhatsappWhatsapp Business
before 2.21.8.13

Weakness classification

References