Whatsapp For Android

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:facebook:whatsapp_for_android:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFacebook (c319c35a-3469-5baa-b3bd-8582d1206a92)
ProductWhatsapp For Android (2dea2cf6-5841-5a94-8512-0fa14f17d489)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-23866 vulnerable 2026-06-08 07:51:16.361072 Details available
MEDIUM (4.3)
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device, including triggering OS-controlled custom URL scheme handlers. We have not seen evidence of exploitation in the wild.
Published: 2026-05-01T16:02:03.304Z
Updated: 2026-05-01T17:42:09.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38538 vulnerable 2026-06-08 06:08:18.242714 Details available
MEDIUM (5)
A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app termination or unexpected control flow with very low probability.
Published: 2023-10-04T19:10:49.627Z
Updated: 2024-09-19T15:27:48.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38537 vulnerable 2026-06-08 06:08:18.241052 Details available
MEDIUM (5.6)
A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have resulted in app termination or unexpected control flow with very low probability.
Published: 2023-10-04T19:09:58.086Z
Updated: 2024-09-19T15:27:23.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24042 vulnerable 2026-06-08 05:30:03.530464 Details available
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp Desktop prior to v2.2146 could have allowed an out-of-bounds write if a user makes a 1:1 call to a malicious actor.
Published: 2022-01-04T18:55:08.000Z
Updated: 2025-05-22T18:36:53.143Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24041 vulnerable 2026-06-08 05:30:03.527350 Details available
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image.
Published: 2021-12-07T19:10:09.000Z
Updated: 2024-08-03T19:21:17.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24035 vulnerable 2026-06-08 05:30:03.514708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24027 vulnerable 2026-06-08 05:30:03.503066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24026 vulnerable 2026-06-08 05:30:03.499657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1907 vulnerable 2026-06-08 05:21:03.498352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1906 vulnerable 2026-06-08 05:21:03.497941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1905 vulnerable 2026-06-08 05:21:03.497612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1902 vulnerable 2026-06-08 05:21:03.494948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1890 vulnerable 2026-06-08 05:21:03.469534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1886 vulnerable 2026-06-08 05:21:03.453061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3568 vulnerable 2026-06-08 05:13:55.063987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3566 vulnerable 2026-06-08 05:13:55.057309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11933 vulnerable 2026-06-08 05:12:38.317200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11931 vulnerable 2026-06-08 05:12:38.308468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11927 vulnerable 2026-06-08 05:12:38.293054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6350 vulnerable 2026-06-08 05:11:53.631011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6349 vulnerable 2026-06-08 05:11:53.630556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6344 vulnerable 2026-06-08 05:11:53.624733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6339 vulnerable 2026-06-08 05:11:53.614210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.