CVE-2018-6344

CVE-2018-6344

Vendor Facebook

Product WhatsApp for Android

Weakness CWE-122

Published December 31, 2018

Last update May 6, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to v2.18.172.

Key dates

02Disclosure timeline

December 31, 2018 CVE published

May 6, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-6344 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/122.html

Related vulnerabilities

Identifiers

CVE CVE-2018-6344

CWE CWE-122

Affected versions

Vendor Facebook

Product WhatsApp for Android

Affected 2.18.293

Vendor Facebook

Product WhatsApp for Android

Affected ≥ unspecified and < 2.18.293

Vendor Facebook

Product WhatsApp for iOS

Affected 2.18.93

Vendor Facebook

Product WhatsApp for iOS

Affected ≥ unspecified and < 2.18.93

Vendor Facebook

Product WhatsApp for Windows Phone

Affected 2.18.172

Vendor Facebook

Product WhatsApp for Windows Phone

Affected ≥ unspecified and < 2.18.172

01Description

02Disclosure timeline

03References

04Related CVE