Skip to content
OpenAdvisories
High · 7.5 CVE-2018-6344 EUVD-2018-18102GHSA-vhw2-763j-8c4r

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used…

Published Dec 31, 2018 · Updated May 6, 2025 · Assigned by facebook

Description

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to v2.18.172.

Affected products

VendorProductAffectedFixed
Facebook WhatsApp for Android 2.18.293, unspecified – < 2.18.293 2.18.293
Facebook WhatsApp for iOS 2.18.93, unspecified – < 2.18.93 2.18.93
Facebook WhatsApp for Windows Phone 2.18.172, unspecified – < 2.18.172 2.18.172

References