CVE-2021-24027

—

CVSS 3.1

7.5 high

EPSS

4%p89

Published

Apr 6, 2021 (Apr 6, 2021)

Modified

Jun 17, 2026

Description

A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material.

Vendors: whatsapp
Products: whatsapp, whatsapp business
Weakness: CWE-524
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news2 stories

New WhatsApp Bugs Could've Let Attackers Hack Your Phone Remotely

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2021Exploit / PoC in the wildCVE-2021-24027 CVE-2020-6516

WhatsApp flaws could have allowed hackers to hack mobile devices

Security AffairsApr 14, 21:03 UTC · Apr 14, 2021Vulnerability CVE-2021-24027 CVE-2020-6516