CVE-2020-1903

Published: Oct 6, 2020Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have resulted in an out-of-memory denial of service. This issue would have required the receiver to explicitly open the attachment if it was received from a number not in the receiver's WhatsApp contacts.

Affected (2)

Products: Whatsapp: Whatsapp, Whatsapp Business

2 products

Whatsapp Business

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Whatsapp Whatsapp	Before 2.20.61
Whatsapp Whatsapp Business	Before 2.20.61

Related CWEs

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (2)

https://www.whatsapp.com/security/advisories/2020/

Source: cve-assign@fb.com

Vendor Advisory

https://www.whatsapp.com/security/advisories/2020/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.