Vulnerability · Published Feb 2, 2021 · Assigned by facebook
CVE-2020-1910
High 7.8
In plain English
A high-severity out-of-bounds write in WhatsApp Business for Android from WhatsApp. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.1% (higher than 92% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)5.1%top 7.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed out-of-bounds read and write if a user applied specific image filters to a specially crafted image and sent the resulting image.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WhatsApp Business for Android | unspecified – before v2.21.1.13 | |
| WhatsApp for Android | unspecified – before v2.21.1.13 |
Weakness: CWE-787
References
- https://www.whatsapp.com/security/advisories/2021/ x_refsource_CONFIRM