Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qmff-84f8-hxmm

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.

An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.

EPSS

Процентиль: 51%
0.00282
Низкий

Связанные уязвимости

CVSS3: 7.8
nvd
больше 6 лет назад

An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.

EPSS

Процентиль: 51%
0.00282
Низкий