CVE-2020-1894
Summary
| CVE | CVE-2020-1894 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-09-03 21:15:00 UTC |
| Updated | 2020-09-11 17:49:00 UTC |
| Description | A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.20.30 could have allowed arbitrary code execution when playing a specially crafted push to talk message. |
Risk And Classification
Problem Types: CWE-787
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | All | All | All | All | ||
| Application | All | All | All | All | ||
| Application | All | All | All | All | ||
| Application | All | All | All | All | ||
| Application | Whatsapp Business | All | All | All | All | |
| Application | Whatsapp Business | All | All | All | All | |
| Application | Whatsapp Business | All | All | All | All | |
| Application | Whatsapp Business | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| WhatsApp Security Advisories | CONFIRM | www.whatsapp.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.