CVE-2020-1905 : What You Need to Know

WhatsApp for Android prior to version 2.20.185 was vulnerable to a security issue allowing malicious apps to guess URIs of previously opened attachments.

Understanding CVE-2020-1905

Media ContentProvider URIs used for opening attachments in other apps were generated sequentially in WhatsApp for Android, potentially exposing users to malicious activities.

What is CVE-2020-1905?

The vulnerability in WhatsApp for Android versions prior to 2.20.185 allowed a malicious third-party app to guess URIs for previously opened attachments until the opener app is terminated.

The Impact of CVE-2020-1905

This vulnerability could have enabled unauthorized access to potentially sensitive information by exploiting the sequential generation of URIs for media attachments.

Technical Details of CVE-2020-1905

The following technical details outline the specifics of CVE-2020-1905:

Vulnerability Description

Media ContentProvider URIs were sequentially generated in WhatsApp for Android, potentially enabling malicious apps to guess attachment URIs.

Affected Systems and Versions

Product: WhatsApp for Android
Vendor: Facebook
Versions Affected:
2.20.185
Unspecified custom version

Exploitation Mechanism

Malicious third-party apps could exploit the sequential generation of URIs to guess URIs for previously opened attachments until the opening app is closed.

Mitigation and Prevention

To address the CVE-2020-1905 vulnerability, the following steps are recommended:

Immediate Steps to Take

Update WhatsApp for Android to version 2.20.185 or later to mitigate the risk of unauthorized URI guessing.
Avoid opening attachments from untrusted or suspicious sources to prevent potential security breaches.

Long-Term Security Practices

Regularly update applications on mobile devices to ensure the latest security patches are applied.
Be cautious when granting file access permissions to apps to minimize the risk of unauthorized data access.

Patching and Updates

Stay informed about security advisories and updates from WhatsApp and Facebook to promptly address any known vulnerabilities.