A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app termination or unexpected control flow with very low probability.
References
Link | Resource |
---|---|
https://www.whatsapp.com/security/advisories/2023/ | Vendor Advisory |
https://www.whatsapp.com/security/advisories/2023/ | Vendor Advisory |
Configurations
History
21 Nov 2024, 08:13
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.whatsapp.com/security/advisories/2023/ - Vendor Advisory |
10 Oct 2023, 13:33
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-362 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.0 |
First Time |
Whatsapp
Whatsapp whatsapp |
|
CPE | cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:desktop:windows:*:* | |
References | (MISC) https://www.whatsapp.com/security/advisories/2023/ - Vendor Advisory |
04 Oct 2023, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-10-04 20:15
Updated : 2024-11-21 08:13
NVD link : CVE-2023-38538
Mitre link : CVE-2023-38538
CVE.ORG link : CVE-2023-38538
JSON object : View
Products Affected
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')