Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerability · NVD

CVE-2018-6339

CVE-2018-6339, critical severity (CVSS 9.8): 1 tracked app concerned, all fixed or indeterminable on their current version.

Severity (CVSS)
9.8

NVD scale

Exploitation
1.5 %

EPSS, predicted over 30 days

Tracked apps
1
Still exposed
0

When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An off-by-one error meant that data was written beyond the allocated space on the stack. This issue affects WhatsApp for Android starting in version 2.18.180 and was fixed in version 2.18.295. It also affects WhatsApp Business for Android starting in version v2.18.103 and was fixed in version v2.18.150.

Attack vector : Network No privileges required No user interaction
Show raw CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS 1.54% above median percentile 73.8%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

  • WhatsApp Android com.whatsapp
    Affected ≥2.18.180 <2.18.295 Fixed in 2.18.295 Latest tracked 2.26.35.75 patched
Vulnerable CPE configurations (2)
Vendor Product Versions
whatsapp whatsapp
Android
 ≥2.18.180 <2.18.295
whatsapp whatsapp_business
Android
 ≥2.18.103 <2.18.150
View on NVD ↗

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM