WhatsApp CVE-2018-6350 Out of Bounds Read Denial of Service Vulnerability

Bugtraq ID:	108803
Class:	Boundary Condition Error
CVE:	CVE-2018-6350
Remote:	Yes
Local:	No
Published:	Jun 18 2019 12:00AM
Updated:	Jun 18 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	WhatsApp Inc. WhatsApp for iOS 2.18.90.24 WhatsApp Inc. WhatsApp for Android 2.19.134 WhatsApp Inc. WhatsApp for Android 2.19.133 WhatsApp Inc. WhatsApp for Android 2.18.273 WhatsApp Inc. WhatsApp for Android 2.18.248 WhatsApp Inc. WhatsApp for Android 2.18.247 WhatsApp Inc. WhatsApp Business for iOS 2.18.81 WhatsApp Inc. WhatsApp Business for iOS 2.18.90.24
Not Vulnerable:	WhatsApp Inc. WhatsApp for Windows Phone 2.18.224 WhatsApp Inc. WhatsApp for iOS 2.18.100.6 WhatsApp Inc. WhatsApp for Android 2.18.276 WhatsApp Inc. WhatsApp Business for iOS 2.18.100.2 WhatsApp Inc. WhatsApp Business for Android 2.18.99

WhatsApp CVE-2018-6350 Out of Bounds Read Denial of Service Vulnerability

WhatsApp is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code-execution may be possible; however this has not been confirmed.

WhatsApp CVE-2018-6350 Out of Bounds Read Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

WhatsApp CVE-2018-6350 Out of Bounds Read Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

WhatsApp CVE-2018-6350 Out of Bounds Read Denial of Service Vulnerability

References:

• WhatsApp Homepage (WhatsApp Inc.)
  
• CVE-2018-6350 ()