First published: Tue Apr 06 2021(Updated: )
Credit: cve-assign@fb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Whatsapp Whatsapp | <2.21.4.18 | |
Whatsapp Whatsapp Business | <2.21.4.18 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-24027 is a cache configuration issue in WhatsApp for Android and WhatsApp Business for Android versions prior to 2.21.4.18.
A third party with access to the device's external storage could exploit CVE-2021-24027 to read cached TLS material.
CVE-2021-24027 has a severity rating of high (7.5).
WhatsApp for Android versions prior to 2.21.4.18 and WhatsApp Business for Android versions prior to 2.21.4.18 are affected by CVE-2021-24027.
You can find more information about CVE-2021-24027 on WhatsApp's security advisories page: https://www.whatsapp.com/security/advisories/2021/