CVE-2018-6339: Buffer Overflow
When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An off-by-one error meant that data was written beyond the allocated space on the stack. This issue affects WhatsApp for Android starting in version 2.18.180 and was fixed in version 2.18.295. It also affects WhatsApp Business for Android starting in version v2.18.103 and was fixed in version v2.18.150.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-6339?
CVE-2018-6339 is a vulnerability in WhatsApp on Android that allows data to be written beyond the allocated space on the stack when receiving calls.
What is the severity of CVE-2018-6339?
CVE-2018-6339 has a severity value of 9.8, which is considered critical.
Which versions of WhatsApp for Android are affected by CVE-2018-6339?
WhatsApp for Android versions starting from 2.18.180 up to 2.18.295 are affected by CVE-2018-6339.
How can I fix CVE-2018-6339?
To fix CVE-2018-6339, update WhatsApp for Android to a version beyond 2.18.295.
What are the CWE IDs associated with CVE-2018-6339?
The CWE IDs associated with CVE-2018-6339 are CWE-119 and CWE-121.