Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-57mf-q34v-cf2p

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for Android prior to 2.18.248 and WhatsApp Business for Android prior to 2.18.132.

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for Android prior to 2.18.248 and WhatsApp Business for Android prior to 2.18.132.

EPSS

Процентиль: 79%
0.01312
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 9.8
nvd
больше 6 лет назад

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for Android prior to 2.18.248 and WhatsApp Business for Android prior to 2.18.132.

EPSS

Процентиль: 79%
0.01312
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-121
CWE-787