ByteOS Network

NVD Vulnerability Details :

CVE-2018-6339

Modified

Source-cve-assign@fb.com

Published At-14 Jun, 2019 | 17:29

Updated At-09 Oct, 2019 | 23:41

When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An off-by-one error meant that data was written beyond the allocated space on the stack. This issue affects WhatsApp for Android starting in version 2.18.180 and was fixed in version 2.18.295. It also affects WhatsApp Business for Android starting in version v2.18.103 and was fixed in version v2.18.150.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

WhatsApp LLC

>>whatsapp>>Versions from 2.18.103(inclusive) to 2.18.150(exclusive)

cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:business:android:*:*

WhatsApp LLC

>>whatsapp>>Versions from 2.18.180(inclusive) to 2.18.295(exclusive)

cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:android:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov
CWE-121	Secondary	cve-assign@fb.com

References

Hyperlink	Source	Resource
https://www.facebook.com/security/advisories/cve-2018-6339/	cve-assign@fb.com	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History