23 known vulnerabilities
Top Products
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and
An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously f
A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user.
A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version
An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on th
An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send fi
An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects Wha
When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for
When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data bei
When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a st
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTC
A bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual who has taken over over a
A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulner
Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files (Audio, Document
Frequently Asked Questions
How many CVEs affect Whatsapp?
Whatsapp has 23 CVE records in our database, including 11 critical and 6 high severity vulnerabilities. 1 of these are listed in CISA's Known Exploited Vulnerabilities catalog.
What are the most severe Whatsapp vulnerabilities?
Whatsapp has 11 critical severity (CVSS 9.0+) and 6 high severity (CVSS 7.0-8.9) vulnerabilities. 1 vulnerabilities are confirmed as actively exploited in the wild.
How can I scan for Whatsapp vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Whatsapp products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Whatsapp Vulnerabilities
CyberStrike scans your infrastructure for Whatsapp vulnerabilities and provides real-time remediation guidance.
Get Started