Skip to content
OpenAdvisories
High · 7.8 CVE-2022-27492 EUVD-2022-31993GHSA-98r4-4f3j-q239

An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file.

Published Sep 23, 2022 · Updated May 22, 2025 · Assigned by facebook

Vendor: Meta Product: WhatsApp Business for Android Product: WhatsApp Business for iOS Product: WhatsApp for Android Product: WhatsApp for iOS Platform: Android Platform: iOS

Description

An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file.

Affected products

VendorProductAffectedFixed
Meta WhatsApp Business for iOS unspecified – < v2.22.15.9 v2.22.15.9
Meta WhatsApp for iOS unspecified – < v2.22.15.9 v2.22.15.9
Meta WhatsApp for Android unspecified – < 2.22.16.2 2.22.16.2
Meta WhatsApp Business for Android unspecified – < 2.22.16.2 2.22.16.2

References