CVE-2018-6344CWE-122

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established

High · published December 31, 2018

CVSS v3.1
7.5
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to v2.18.172.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01949 · 79.9th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2018-12-31T22:00Z
EPSS history
Timeline
  • 31 DEC 22:00Z
    A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established
    cvelistv5