Unscored CVE-2018-6349 EUVD-2018-18107GHSA-57mf-q34v-cf2p

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overf…

Published Jun 14, 2019 · Updated Aug 5, 2024 · Assigned by facebook

Vendor: Facebook Product: WhatsApp Business for Android Product: WhatsApp for Android Platform: Android

Description

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for Android prior to 2.18.248 and WhatsApp Business for Android prior to 2.18.132.

Affected products

Vendor	Product	Affected	Fixed
Facebook	WhatsApp for Android	2.18.248, unspecified – < 2.18.248	2.18.248
Facebook	WhatsApp Business for Android	2.18.132, unspecified – < 2.18.132	2.18.132

References

https://www.facebook.com/security/advisories/cve-2018-6349/
108804 vdb-entry