CVE-2020-1894CWE-787

A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and…

published September 3, 2020

CVSS
—
EPSS
2%
Percentile
77.7
In the wild
Unconfirmed
What it is

A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.20.30 could have allowed arbitrary code execution when playing a specially crafted push to talk message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01752 · 77.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2020-09-03T21:10Z
EPSS history
Timeline
  • 03 SEP 21:10Z
    A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and…
    cvelistv5