by Kastro
Paper/Archive/CVE-2021-24041

CVE-2021-24041

Facebook WhatsApp Business for Android — A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could…

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 69.3.693 × 2013.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image.

Affected

ProductAffectedFixed inSource
WhatsApp Business for Androidunspecified – < v2.21.22.7v2.21.22.7CNA
WhatsApp for Androidunspecified – < v2.21.22.7v2.21.22.7CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refwhatsapp.com/security/advisories/2021