Skip to content
OpenAdvisories
Unscored CVE-2018-6350 EUVD-2018-18108GHSA-57fh-5mmw-ppxc

An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android p…

Published Jun 14, 2019 · Updated Aug 5, 2024 · Assigned by facebook

Description

An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, WhatsApp Business for Android prior to 2.18.99, WhatsApp for iOS prior to 2.18.100.6, WhatsApp Business for iOS prior to 2.18.100.2, and WhatsApp for Windows Phone prior to 2.18.224.

Affected products

VendorProductAffectedFixed
Facebook WhatsApp for Android 2.18.276, unspecified – < 2.18.276 2.18.276
Facebook WhatsApp Business for Android 2.18.99, unspecified – < 2.18.99 2.18.99
Facebook WhatsApp for iOS 2.18.100.6, unspecified – < 2.18.100.6 2.18.100.6
Facebook WhatsApp Business for iOS 2.18.100.2, unspecified – < 2.18.100.2 2.18.100.2
Facebook WhatsApp for Windows Phone 2.18.224, unspecified – < 2.18.224 2.18.224

References