CVE-2021-24043
First published: Wed Feb 02 2022(Updated: )
A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230.6, WhatsApp Business for iOS 2.21.230.7, and WhatsApp Desktop v2.2145.0 could have allowed an out-of-bounds heap read if a user sent a malformed RTCP packet during an established call.
Credit: cve-assign@fb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Whatsapp Whatsapp | =2.21.23.2 | |
| Whatsapp Whatsapp | =2.21.230.6 | |
| WhatsApp WhatsApp | =2.2145.0 | |
| Whatsapp Whatsapp Business | =2.21.23.2 | |
| Whatsapp Whatsapp Business | =2.21.230.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-24043?
CVE-2021-24043 is a vulnerability in WhatsApp for Android, WhatsApp Business for Android, WhatsApp for iOS, WhatsApp Business for iOS, and WhatsApp Desktop that could allow an out-of-bounds heap read if a user sent a malformed RTCP flag.
What is the severity of CVE-2021-24043?
The severity of CVE-2021-24043 is critical with a CVSS score of 9.1.
What software versions are affected by CVE-2021-24043?
WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230.6, WhatsApp Business for iOS 2.21.230.7, and WhatsApp Desktop v2.2145.0 are affected by CVE-2021-24043.
How can I fix CVE-2021-24043?
To fix CVE-2021-24043, update WhatsApp for Android to version 2.21.23.2 or later, WhatsApp Business for Android to 2.21.23.2 or later, WhatsApp for iOS to 2.21.230.6 or later, WhatsApp Business for iOS to 2.21.230.7 or later, and WhatsApp Desktop to 2.2145.0 or later.
Where can I find more information about CVE-2021-24043?
You can find more information about CVE-2021-24043 on the WhatsApp security advisories page.
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/whatsapp
- canonical/whatsapp whatsapp
- version/whatsapp whatsapp/2.21.23.2
- version/whatsapp whatsapp/2.21.230.6
- version/whatsapp whatsapp/2.2145.0
- canonical/whatsapp whatsapp business
- version/whatsapp whatsapp business/2.21.23.2
- version/whatsapp whatsapp business/2.21.230.7