Approved changes feed: RSS · Atom

cpe:2.3:a:facebook:whatsapp_business_for_android:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFacebook (c319c35a-3469-5baa-b3bd-8582d1206a92)
ProductWhatsapp Business For Android (655e5b2c-f020-53c8-bd23-865b2b81bc80)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38538 vulnerable 2026-06-08 06:08:18.242690 Details available
MEDIUM (5)
A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app termination or unexpected control flow with very low probability.
Published: 2023-10-04T19:10:49.627Z
Updated: 2024-09-19T15:27:48.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38537 vulnerable 2026-06-08 06:08:18.240344 Details available
MEDIUM (5.6)
A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have resulted in app termination or unexpected control flow with very low probability.
Published: 2023-10-04T19:09:58.086Z
Updated: 2024-09-19T15:27:23.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24042 vulnerable 2026-06-08 05:30:03.530444 Details available
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp Desktop prior to v2.2146 could have allowed an out-of-bounds write if a user makes a 1:1 call to a malicious actor.
Published: 2022-01-04T18:55:08.000Z
Updated: 2025-05-22T18:36:53.143Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24041 vulnerable 2026-06-08 05:30:03.527314 Details available
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image.
Published: 2021-12-07T19:10:09.000Z
Updated: 2024-08-03T19:21:17.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24035 vulnerable 2026-06-08 05:30:03.514668 Details available
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.
Published: 2021-06-11T03:35:10.000Z
Updated: 2024-08-03T19:21:17.185Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24027 vulnerable 2026-06-08 05:30:03.503020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24026 vulnerable 2026-06-08 05:30:03.498777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1907 vulnerable 2026-06-08 05:21:03.498386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1906 vulnerable 2026-06-08 05:21:03.497974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1902 vulnerable 2026-06-08 05:21:03.494986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1894 vulnerable 2026-06-08 05:21:03.477491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1891 vulnerable 2026-06-08 05:21:03.471795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1890 vulnerable 2026-06-08 05:21:03.469582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1886 vulnerable 2026-06-08 05:21:03.453998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3568 vulnerable 2026-06-08 05:13:55.064037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3566 vulnerable 2026-06-08 05:13:55.058028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11931 vulnerable 2026-06-08 05:12:38.310748 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6350 vulnerable 2026-06-08 05:11:53.631042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6349 vulnerable 2026-06-08 05:11:53.630595 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6339 vulnerable 2026-06-08 05:11:53.614746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.