CVE-2020-1909: Use After Free
A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in memory corruption, crashes and potentially code execution. This could have happened only if several events occurred together in sequence, including receiving an animated sticker while placing a WhatsApp video call on hold.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-1909?
CVE-2020-1909 is a use-after-free vulnerability in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111, which could result in memory corruption, crashes, and potentially code execution.
How does CVE-2020-1909 affect me?
If you are using WhatsApp for iOS prior to v2.20.111 or WhatsApp Business for iOS prior to v2.20.111, you may be affected by the use-after-free vulnerability, which could lead to memory corruption, crashes, and potentially code execution.
How severe is CVE-2020-1909?
CVE-2020-1909 has a severity rating of 9.8 (Critical).
How can I fix CVE-2020-1909?
To fix CVE-2020-1909, update WhatsApp for iOS to v2.20.111 or later, or update WhatsApp Business for iOS to v2.20.111 or later.
Where can I find more information about CVE-2020-1909?
You can find more information about CVE-2020-1909 on the official WhatsApp security advisories page: https://www.whatsapp.com/security/advisories/2020/