CVE-2018-6344: High severity whatsapp vulnerability

Q: What is CVE-2018-6344?

CVE-2018-6344 is a vulnerability in WhatsApp that allows a heap corruption to occur when a malformed RTP packet is sent after a call is established.

Q: How does CVE-2018-6344 impact WhatsApp?

CVE-2018-6344 can be used to cause a denial of service by triggering a heap corruption in WhatsApp.

Q: What is the severity of CVE-2018-6344?

CVE-2018-6344 has a severity rating of high with a score of 7.5.

Q: How can I fix CVE-2018-6344?

To fix CVE-2018-6344, update your WhatsApp to the latest version available for your device.

Published Dec 31, 2018

Updated

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to v2.18.172.

Affected Software

3 affected components

WhatsApp Whatsapp Iphone Os<2.18.93

WhatsApp Whatsapp Windows Phone<2.18.172

WhatsApp Whatsapp Android<2.18.293

Event History

Dec 31, 2018

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionWeakness

Data Sourced

via NVD·10:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-6344?

CVE-2018-6344 is a vulnerability in WhatsApp that allows a heap corruption to occur when a malformed RTP packet is sent after a call is established.

How does CVE-2018-6344 impact WhatsApp?

CVE-2018-6344 can be used to cause a denial of service by triggering a heap corruption in WhatsApp.

Which versions of WhatsApp are affected by CVE-2018-6344?

WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to v2.18.172 are affected by CVE-2018-6344.

What is the severity of CVE-2018-6344?