CVE-2021-24035: Path Traversal
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-24035?
CVE-2021-24035 is a vulnerability that allows path traversal attacks in WhatsApp for Android and WhatsApp Business for Android prior to version 2.21.8.13.
What is the severity of CVE-2021-24035?
The severity of CVE-2021-24035 is critical, with a CVSS score of 9.1.
How does CVE-2021-24035 work?
CVE-2021-24035 works by taking advantage of a lack of filename validation when unzipping archives, allowing path traversal attacks to overwrite WhatsApp files.
Which software versions are affected by CVE-2021-24035?
WhatsApp for Android and WhatsApp Business for Android versions prior to 2.21.8.13 are affected by CVE-2021-24035.
How can I fix CVE-2021-24035?
To fix CVE-2021-24035, make sure to update WhatsApp for Android and WhatsApp Business for Android to version 2.21.8.13 or later.