CVE-2021-24042

CRITICAL

9.8

Description

The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp Desktop prior to v2.2146 could have allowed an out-of-bounds write if a user makes a 1:1 call to a malicious actor.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published1/4/2022

Last Modified5/22/2025

Sourcenvd

Honeypot Sightings0

Affected Products

whatsapp:whatsapp

Weaknesses (CWE)

CWE-122CWE-787CWE-787

References

https://www.whatsapp.com/security/advisories/2021/(cve-assign@fb.com)

https://www.whatsapp.com/security/advisories/2021/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.