CVE-2018-6344

PoC —

CVSS 3.1

7.5 high

EPSS

2%p79

Published

Dec 31, 2018 (Dec 31, 2018)

Modified

Jun 17, 2026

Description

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to v2.18.172.

Vendors: whatsapp
Products: whatsapp
Weakness: CWE-122, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.