Critical · published May 14, 2019
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 98.2th percentile for exploit probability.
🚨 A crafty series of RTCP packets can compromise your phone through WhatsApp! This buffer overflow vulnerability is a real game-changer. 🔥 Think of this vulnerability like a sneaky delivery person who, instead of just dropping off a package, starts rearranging everything in your living room—an innocent-looking visitor that creates chaos! An attacker could send malicious packets to your WhatsApp, allowing them to run any code they desire on your device—essentially gaining access to your private conversations, photos, and even your contacts. This is an absolutely devastating scenario for your privacy!
Think of this vulnerability like a sneaky delivery person who, instead of just dropping off a package, starts rearranging everything in your living room—an innocent-looking visitor that creates chaos! This vulnerability in the WhatsApp VOIP stack allows for remote code execution through a buffer overflow triggered by specially crafted RTCP packets sent to the target phone number.
An attacker could send malicious packets to your WhatsApp, allowing them to run any code they desire on your device—essentially gaining access to your private conversations, photos, and even your contacts. This is an absolutely devastating scenario for your privacy! Update WhatsApp to version 2.19.134 or later on Android, 2.19.51 or later on iOS, or 2.18.348 on Windows Phone. Don't forget to check Tizen users, too—update to at least version 2.18.15! 🛡️ You've got this! Follow these steps and secure your WhatsApp in no time! 💪😊