CVE-2021-24035 : What You Need to Know

A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.

Understanding CVE-2021-24035

This CVE affects WhatsApp for Android and WhatsApp Business for Android versions less than v2.21.8.13 due to a lack of filename validation during archive extraction, potentially leading to path traversal attacks.

What is CVE-2021-24035?

The vulnerability in CVE-2021-24035 pertains to a lack of proper filename validation during the unzipping process of archives in affected versions of WhatsApp for Android and WhatsApp Business for Android. This issue could enable malicious actors to perform path traversal attacks and overwrite critical files within WhatsApp.

The Impact of CVE-2021-24035

If exploited, this vulnerability could allow cyber attackers to manipulate files within the WhatsApp application, potentially leading to data corruption, unauthorized access, or further exploitation of the affected devices.

Technical Details of CVE-2021-24035

The technical details of CVE-2021-24035 include:

Vulnerability Description

The vulnerability arises from the lack of proper filename validation during archive extraction, opening paths for malicious actors to overwrite crucial WhatsApp files.

Affected Systems and Versions

WhatsApp for Android and WhatsApp Business for Android versions less than v2.21.8.13 are impacted by this vulnerability, with prior versions susceptible to path traversal attacks.

Exploitation Mechanism

By leveraging the absence of filename validation, threat actors can craft malicious archives designed to overwrite essential files within the WhatsApp application, potentially compromising user data and system integrity.

Mitigation and Prevention

To address CVE-2021-24035 and enhance overall security, users and administrators are advised to take the following measures:

Immediate Steps to Take

Update WhatsApp for Android and WhatsApp Business for Android to versions equal to or greater than v2.21.8.13 to mitigate the vulnerability.
Exercise caution when opening or extracting any archives from untrusted or unknown sources to prevent potential attacks.

Long-Term Security Practices

Implement a robust security posture by installing security software that can detect and prevent malicious file manipulations.
Conduct regular security audits and penetration testing to identify and remediate vulnerabilities in applications and systems.

Patching and Updates

Stay informed about security advisories and updates provided by WhatsApp to address vulnerabilities promptly and ensure the protection of your devices and data.