CVE-2020-1909

A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in memory corruption, crashes and potentially code execution. This could have happened only if several events occurred together in sequence, including receiving an animated sticker while placing a WhatsApp video call on hold.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:iphone_os:*:*
cpe:2.3:a:whatsapp:whatsapp_business:*:*:*:*:*:iphone_os:*:*

History

21 Nov 2024, 05:11

Type Values Removed Values Added
References () https://www.whatsapp.com/security/advisories/2020/ - Vendor Advisory () https://www.whatsapp.com/security/advisories/2020/ - Vendor Advisory

Information

Published : 2020-11-03 20:15

Updated : 2024-11-21 05:11


NVD link : CVE-2020-1909

Mitre link : CVE-2020-1909

CVE.ORG link : CVE-2020-1909


JSON object : View

Products Affected

whatsapp

  • whatsapp_business
  • whatsapp
CWE
CWE-416

Use After Free