9.8

CVE-2018-6350

EPSS 0.4%
Published 14.06.2019 17:29:02
Last modified 03.09.2025 17:36:53
Source cve-assign@fb.com
Teams watchlist Login
Open Login

An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, WhatsApp Business for Android prior to 2.18.99, WhatsApp for iOS prior to 2.18.100.6, WhatsApp Business for iOS prior to 2.18.100.2, and WhatsApp for Windows Phone prior to 2.18.224.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

WhatsApp ≫ WhatsApp SwPlatformandroid Version < 2.18.99

WhatsApp ≫ WhatsApp SwPlatformiphone_os Version < 2.18.100.6

WhatsApp ≫ WhatsApp SwPlatformwindows_phone Version < 2.18.224

WhatsApp ≫ WhatsApp Business SwPlatformiphone_os Version < 2.18.100.2

WhatsApp ≫ WhatsApp Business SwPlatformandroid Version < 2.18.276

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.4%	0.598

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

http://www.securityfocus.com/bid/108803

https://www.facebook.com/security/advisories/cve-2018-6350/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-6350

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-6350

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-6350

EUVD