CVE-2018-6339
Critical
Description
When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An off-by-one error meant that data was written beyond the allocated space on the stack. This issue affects WhatsApp for Android starting in version 2.18.180 and was fixed in version 2.18.295. It also affects WhatsApp Business for Android starting in version v2.18.103 and was fixed in version v2.18.150.
SeverityCritical
CVSS9.8
Exploit probability—
ProductWhatsapp
PublishedJun 14, 2019
First seenJun 14, 2019
Weakness typeCWE-121CWE-121
How to fix
Update
- whatsapp whatsapp2.18.295 or later
- whatsapp whatsapp_business2.18.150 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| whatsapp whatsapp | 2.18.180 ≤ v < 2.18.295 | 2.18.295 |
| whatsapp whatsapp_business | 2.18.103 ≤ v < 2.18.150 | 2.18.150 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.