Skip to content
OpenAdvisories
Medium · 5.0 CVE-2023-38538 EUVD-2023-42337GHSA-hr72-3p79-rchw

A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app …

Published Oct 4, 2023 · Updated Sep 19, 2024 · Assigned by facebook

Vendor: Facebook Product: WhatsApp Business for Android Product: WhatsApp Business for iOS Product: WhatsApp Desktop for Mac Product: WhatsApp Desktop for Windows Product: WhatsApp for Android Product: WhatsApp for iOS Platform: Android Platform: iOS Platform: Windows

Description

A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app termination or unexpected control flow with very low probability.

Affected products

VendorProductAffectedFixed
Facebook WhatsApp Desktop for Mac < 2.2338.12 2.2338.12
Facebook WhatsApp Desktop for Windows < 2.2320.2 2.2320.2
Facebook WhatsApp Business for iOS < 2.23.10.77 2.23.10.77
Facebook WhatsApp for iOS < 2.23.10.77 2.23.10.77
Facebook WhatsApp Business for Android < 2.23.10.77 2.23.10.77
Facebook WhatsApp for Android < 2.23.10.77 2.23.10.77

References