The fix is available since version 2.21.1.13. WhatsApp verified and acknowledged the security issue and developed a fix. The vulnerability related to the WhatsApp image filter functionality and was triggered when a user opened an attachment that contained a maliciously crafted image file, then tried to apply a filter, and then sent the image with the filter applied back to the attacker.įollowing the process of coordinated disclosure, Check Point Research disclosed the findings to the WhatsApp team on November 10, 2020.
WhatsApp confirmed that they saw no evidence of abuse related to this vulnerability.
The issue, which has been patched and remains theoretical, would have required complex steps and extensive user interaction in order to exploit, and could have allowed an attacker to read sensitive information from WhatsApp memory. It allows users to send text and voice messages, make voice and video calls, and share images, documents, user locations, and other content.Ĭheck Point Research (CPR) recently revealed a new Out-Of-Bounds read-write vulnerability in the popular messaging application.
SeptemResearch by Dikla Barda & Gal ElbazĪs of 2021, WhatsApp is the most popular global mobile messenger app worldwide with approximately two billion monthly active users. Now Patched Vulnerability in WhatsApp could have led to data exposure of users
0 kommentar(er)
