GCVE - cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:business:android:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:business:android:*:*

part: a version: * update: *

Vendor	Whatsapp (`6df57275-bc8b-5b90-9403-1486bd838b3e`)
Product	Whatsapp (`018d9678-f81f-5525-a1cd-b542b9beee6d`)
Edition	*
Language	*
Software edition	business
Target software	android
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-36934`	vulnerable	2026-06-08 05:46:08.106554	Details available An integer overflow in WhatsApp could result in remote code execution in an established video call. Published: 2022-09-22T21:30:11.000Z Updated: 2025-05-27T16:05:50.201Z Open on db.gcve.eu Reference links https://www.whatsapp.com/security/advisories/2022/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-24042`	vulnerable	2026-06-08 05:30:03.532048	Details available The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp Desktop prior to v2.2146 could have allowed an out-of-bounds write if a user makes a 1:1 call to a malicious actor. Published: 2022-01-04T18:55:08.000Z Updated: 2025-05-22T18:36:53.143Z Open on db.gcve.eu Reference links https://www.whatsapp.com/security/advisories/2021/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-24035`	vulnerable	2026-06-08 05:30:03.516304	Details available A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files. Published: 2021-06-11T03:35:10.000Z Updated: 2024-08-03T19:21:17.185Z Open on db.gcve.eu Reference links https://www.whatsapp.com/security/advisories/2021/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3568`	vulnerable	2026-06-08 05:13:55.070144	Details available A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15. Published: 2019-05-14T19:52:40.000Z Updated: 2025-10-21T23:45:37.464Z Open on db.gcve.eu Reference links https://www.facebook.com/security/advisories/cve-2019-3568 http://www.securityfocus.com/bid/108329	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6350`	vulnerable	2026-06-08 05:11:53.634133	Details available An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, WhatsApp Business for Android prior to 2.18.99, WhatsApp for iOS prior to 2.18.100.6, WhatsApp Business for iOS prior to 2.18.100.2, and WhatsApp for Windows Phone prior to 2.18.224. Published: 2019-06-14T17:02:57.000Z Updated: 2024-08-05T06:01:48.744Z Open on db.gcve.eu Reference links https://www.facebook.com/security/advisories/cve-2018-6350/ http://www.securityfocus.com/bid/108803	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6349`	vulnerable	2026-06-08 05:11:53.630620	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6339`	vulnerable	2026-06-08 05:11:53.615507	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.