CVE-2020-1886
HIGHWhatsApp for Android <2.20.11 - WhatsApp Business for Android <2.20...
Title source: llmDescription
A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a specially crafted video stream after receiving and answering a malicious video call.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://www.whatsapp.com/security/advisories/2020
Scores
CVSS v3
8.8
EPSS
0.0048
EPSS Percentile
64.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-120
CWE-787
Status
published
Products (2)
whatsapp/whatsapp
< 2.20.11
whatsapp/whatsapp_business
< 2.20.2
Published
Sep 03, 2020
Tracked Since
Feb 18, 2026