CRITICAL 9.1
CVE-2021-24035
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.
CVSS v3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected tracked apps
Vulnerable CPE configurations
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| Android | <2.21.8.13 | cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:-:android:*:* | ||
| whatsapp_business | Android | <2.21.8.13 | cpe:2.3:a:whatsapp:whatsapp_business:*:*:*:*:*:android:*:* |