A WhatsApp zero-day exploit can cost several million dollars
60
CVE-2020-1910
—CVSS 3.1
7.8 high
EPSS
5%p92
Published
()
Modified
Description
A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed out-of-bounds read and write if a user applied specific image filters to a specially crafted image and sent the resulting image.
- Vendors
- Products
- whatsapp, whatsapp business
- Weakness
- CWE-787
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news3 stories
47
47