CVE-2018-6349

CVE-2018-6349

Vendor Facebook
Product WhatsApp for Android
Weakness CWE-121
Published June 14, 2019
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for Android prior to 2.18.248 and WhatsApp Business for Android prior to 2.18.132.

Key dates

02Disclosure timeline

June 14, 2019 CVE published
August 5, 2024 Record updated