9.8

CVE-2018-6350

EPSS 0.4%
Veröffentlicht 14.06.2019 17:29:02
Zuletzt bearbeitet 03.09.2025 17:36:53
Quelle cve-assign@fb.com
Teams Watchlist Login
Unerledigt Login

An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, WhatsApp Business for Android prior to 2.18.99, WhatsApp for iOS prior to 2.18.100.6, WhatsApp Business for iOS prior to 2.18.100.2, and WhatsApp for Windows Phone prior to 2.18.224.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

WhatsApp ≫ WhatsApp SwPlatformandroid Version < 2.18.99

WhatsApp ≫ WhatsApp SwPlatformiphone_os Version < 2.18.100.6

WhatsApp ≫ WhatsApp SwPlatformwindows_phone Version < 2.18.224

WhatsApp ≫ WhatsApp Business SwPlatformiphone_os Version < 2.18.100.2

WhatsApp ≫ WhatsApp Business SwPlatformandroid Version < 2.18.276

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.4%	0.598

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

http://www.securityfocus.com/bid/108803

https://www.facebook.com/security/advisories/cve-2018-6350/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-6350

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-6350

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-6350

EUVD