CVE-2018-6349CWE-121

When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow

published June 14, 2019

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

⚠️ A missing size check in WhatsApp for Android could create a stack-based overflow just by receiving a call! 📞 Think of it like a package delivery service that ignores the size labels on parcels — if they don't check, they might try to stuff an oversized box into a small mailbox, causing a jam! 📦 If exploited, this vulnerability could lead to unexpected behavior or crashes in the app, leaving users in a tight spot during important conversations. While it’s not currently known to be exploited, it’s a sneaky way for an attacker to disrupt your chat experience!

Put simply

Think of it like a package delivery service that ignores the size labels on parcels — if they don't check, they might try to stuff an oversized box into a small mailbox, causing a jam! 📦 This stack-based overflow arises from a size check that isn’t performed when parsing packets sent by the caller, allowing attackers to send overly large data and potentially execute malicious code.

What to do

If exploited, this vulnerability could lead to unexpected behavior or crashes in the app, leaving users in a tight spot during important conversations. While it’s not currently known to be exploited, it’s a sneaky way for an attacker to disrupt your chat experience! Update WhatsApp for Android to version 2.18.248 or later and ensure that WhatsApp Business is updated to version 2.18.132. Keeping apps updated is crucial for maintaining security! You’ve got this! Just a quick update away from solid security! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02238 · 82.7th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2019-06-14T17:02Z
EPSS history
Timeline
  • 14 JUN 17:02Z
    When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow
    cvelistv5