Page 3 of 44 results (0.004 seconds)

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2020-1906

https://notcve.org/view.php?id=CVE-2020-1906

06 Oct 2020 — A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could have allowed an out-of-bounds write when processing malformed local videos with E-AC-3 audio streams. Un desbordamiento de búfer en WhatsApp para Android anterior a versión v2.20.130 y WhatsApp Business para Android anterior a versión v2.20.46, podría haber permitido una escritura fuera de límites al procesar videos locales malformados con transmisiones de audio E-AC-3 • https://www.whatsapp.com/security/advisories/2020 • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2020-1902

https://notcve.org/view.php?id=CVE-2020-1902

06 Oct 2020 — A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could have been sent to the Google service over plain HTTP. Un usuario que realiza una búsqueda rápida en un mensaje altamente reenviado en WhatsApp para Android desde versiones v2.20.108 hasta v2.20.140 o WhatsApp Business para Android desde versiones v2.20.35 hasta v2.20.49, podría haber sido enviado al servicio de Google por medio de un... • https://www.whatsapp.com/security/advisories/2020 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-319: Cleartext Transmission of Sensitive Information •

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2020-1903

https://notcve.org/view.php?id=CVE-2020-1903

06 Oct 2020 — An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have resulted in an out-of-memory denial of service. This issue would have required the receiver to explicitly open the attachment if it was received from a number not in the receiver's WhatsApp contacts. Un problema al descomprimir documentos docx, pptx y xlsx en WhatsApp para iOS anterior a versión v2.20.61 y WhatsApp Business para iOS anterior a versión v2.20.... • https://www.whatsapp.com/security/advisories/2020 • CWE-400: Uncontrolled Resource Consumption •

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2020-1901

https://notcve.org/view.php?id=CVE-2020-1901

06 Oct 2020 — Receiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have caused the application to freeze while processing the message. Al recibir un mensaje de texto grande que contiene una URL en WhatsApp para iOS anterior a versión v2.20.91.4, podría haber causado que la aplicación se congelara mientras se procesaba el mensaje • https://www.whatsapp.com/security/advisories/2020 • CWE-400: Uncontrolled Resource Consumption •

CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 0

CVE-2020-1891

https://notcve.org/view.php?id=CVE-2020-1891

03 Sep 2020 — A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20, and WhatsApp Business for iPhone prior to v2.20.20 could have allowed an out-of-bounds write on 32-bit devices. Un parámetro controlado por usuario usado en videollamada en WhatsApp para Android versiones anteriores a v2.20.17, WhatsApp Business para Android versiones anteriores a v2.20.7, WhatsApp para iPhone versiones anteriores a ... • https://www.whatsapp.com/security/advisories/2020 • CWE-787: Out-of-bounds Write •

CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0

CVE-2020-1894

https://notcve.org/view.php?id=CVE-2020-1894

03 Sep 2020 — A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.20.30 could have allowed arbitrary code execution when playing a specially crafted push to talk message. Un desbordamiento de escritura de pila en WhatsApp para Android versiones anteriores a v2.20.35, WhatsApp Business para Android versiones anteriores a v2.20.20, WhatsApp para iPhone versiones anteriores a v2.... • https://www.whatsapp.com/security/advisories/2020 • CWE-787: Out-of-bounds Write •

CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2020-1886

https://notcve.org/view.php?id=CVE-2020-1886

03 Sep 2020 — A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a specially crafted video stream after receiving and answering a malicious video call. Un desbordamiento del búfer en WhatsApp para Android versiones anteriores a v2.20.11 y WhatsApp Business para Android versiones anteriores a v2.20.2, podría haber permitido una escritura fuera de límites por medio de una transmisión de video especialmente diseñada des... • https://www.whatsapp.com/security/advisories/2020 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-787: Out-of-bounds Write •

CVSS: 10.0EPSS: 1%CPEs: 1EXPL: 0

CVE-2020-1889

https://notcve.org/view.php?id=CVE-2020-1889

03 Sep 2020 — A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside the sandboxed renderer process. Un problema de omisión de la característica de seguridad en WhatsApp Desktop versiones anteriores a v0.3.4932, podría haber permitido el escape del sandbox en Electron y una escalada de privilegios si se combinaba con una vulnerabilidad de ejecución de código ... • https://www.whatsapp.com/security/advisories/2020 • CWE-265: Privilege Issues •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2020-1890

https://notcve.org/view.php?id=CVE-2020-1890

03 Sep 2020 — A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malformed data to load an image from a sender-controlled URL without user interaction. Un problema de comprobación de URL en WhatsApp para Android versiones anteriores a v2.20.11 y WhatsApp Business para Android versiones anteriores a v2.20.2, podría haber causado que el destinatario de un mensaje sticker que contenía... • https://www.whatsapp.com/security/advisories/2020 • CWE-20: Improper Input Validation •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2019-11928

https://notcve.org/view.php?id=CVE-2019-11928

03 Sep 2020 — An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a specially crafted live location message. Un problema de comprobación de entrada en WhatsApp Desktop versiones anteriores a la v0.3.4932, podría haber permitido un ataque de tipo cross-site scripting al hacer clic en un enlace de un mensaje de ubicación en vivo especialmente diseñado • https://www.whatsapp.com/security/advisories/2020 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •