CVE-2018-20655 : What You Need to Know
Learn about CVE-2018-20655, a stack-based overflow vulnerability in WhatsApp for iOS and WhatsApp Business for iOS versions prior to v2.18.90.24. Find out the impact, affected systems, and mitigation steps.
A stack-based overflow vulnerability was identified in WhatsApp for iOS and WhatsApp Business for iOS, affecting versions prior to v2.18.90.24.
Understanding CVE-2018-20655
This CVE involves a stack-based buffer overflow vulnerability in WhatsApp for iOS and WhatsApp Business for iOS.
What is CVE-2018-20655?
A stack-based overflow was possible while parsing a packet provided by the sender during incoming calls on WhatsApp for iOS. This vulnerability impacts versions earlier than v2.18.90.24 of WhatsApp for iOS and WhatsApp Business for iOS.
The Impact of CVE-2018-20655
- Attackers could exploit this vulnerability to execute arbitrary code or crash the application.
- It could potentially lead to a denial of service (DoS) condition on the affected devices.
Technical Details of CVE-2018-20655
This section provides detailed technical information about the vulnerability.
Vulnerability Description
- The vulnerability arises from a missing size check when parsing a sender-provided packet during incoming calls on WhatsApp for iOS.
Affected Systems and Versions
- WhatsApp for iOS versions prior to v2.18.90.24
- WhatsApp Business for iOS versions prior to v2.18.90.24
Exploitation Mechanism
- Attackers can trigger the stack-based overflow by sending a specially crafted packet during incoming calls.
Mitigation and Prevention
Protecting systems from CVE-2018-20655 requires immediate actions and long-term security practices.
Immediate Steps to Take
- Update WhatsApp for iOS and WhatsApp Business for iOS to version v2.18.90.24 or later.
- Avoid answering calls from unknown or suspicious contacts.
- Exercise caution while interacting with incoming call notifications.
Long-Term Security Practices
- Regularly update applications to the latest versions to patch known vulnerabilities.
- Educate users on recognizing and avoiding potential security risks during communication.
Patching and Updates
- Apply security patches provided by Facebook for WhatsApp for iOS and WhatsApp Business for iOS to address the vulnerability.