Vulnerability · Published Sep 23, 2022 · Assigned by facebook
CVE-2022-27492
High 7.8
In plain English
A high-severity security flaw in WhatsApp Business for Android from Meta. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.5%top 55.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Meta | WhatsApp Business for iOS | unspecified – before v2.22.15.9 |
| Meta | WhatsApp for iOS | unspecified – before v2.22.15.9 |
| Meta | WhatsApp for Android | unspecified – before 2.22.16.2 |
| Meta | WhatsApp Business for Android | unspecified – before 2.22.16.2 |
Weakness: CWE-191 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- https://www.whatsapp.com/security/advisories/2022/ x_refsource_CONFIRM