Advisories · Technology

Facebook WhatsApp for Android.

Every CVE that names Facebook WhatsApp for Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-23866 CVE record

CVSS 4.3 Medium

Facebook WhatsApp for Android: Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for…
- Facebook WhatsApp for Android
- Facebook WhatsApp for iOS
- CWE-940
Not analysed yet 1 May 2026
CVE-2023-38538 CVE record

CVSS 5.0 Medium

A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app termination or unexpected control flow with very low probabi…
- Facebook WhatsApp Desktop for Mac
- Facebook WhatsApp Desktop for Windows
Not analysed yet 4 Oct 2023
CVE-2023-38537 CVE record

CVSS 5.6 Medium

A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have resulted in app termination or unexpected…
- Facebook WhatsApp Desktop for Mac
- Facebook WhatsApp Desktop for Windows
Not analysed yet 4 Oct 2023
CVE-2021-24042 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Heap-based buffer overflow in Facebook WhatsApp Desktop and others
- Facebook WhatsApp Desktop
- Facebook WhatsApp for KaiOS
- Memory corruption
Not analysed yet 4 Jan 2022
CVE-2021-24041 CVE record

Heap-based buffer overflow in Facebook WhatsApp Business for Android and others
- Facebook WhatsApp Business for Android
- Facebook WhatsApp for Android
- Memory corruption
Not analysed yet 7 Dec 2021
CVE-2021-24035 CVE record

Path traversal in Facebook WhatsApp Business for Android and others
- Facebook WhatsApp Business for Android
- Facebook WhatsApp for Android
- Path traversal
Not analysed yet 11 Jun 2021
CVE-2021-24027 CVE record

Facebook WhatsApp Business for Android: A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp…
- Facebook WhatsApp Business for Android
- Facebook WhatsApp for Android
- CWE-524
Not analysed yet 6 Apr 2021
CVE-2021-24026 CVE record

Out-of-bounds write in Facebook WhatsApp Business for iOS and others
- Facebook WhatsApp Business for iOS
- Facebook WhatsApp for iOS
- Memory corruption
Not analysed yet 6 Apr 2021
CVE-2020-1907 CVE record

Out-of-bounds write in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp Business for Android
- Memory corruption
Not analysed yet 6 Oct 2020
CVE-2020-1906 CVE record

Heap-based buffer overflow in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp Business for Android
- Memory corruption
Not analysed yet 6 Oct 2020
CVE-2020-1905 CVE record

Facebook WhatsApp for Android: Media ContentProvider URIs used for opening attachments in other apps were generated…
- Facebook WhatsApp for Android
- CWE-340
Not analysed yet 6 Oct 2020
CVE-2020-1902 CVE record

Information disclosure in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp Business for Android
- Information disclosure
Not analysed yet 6 Oct 2020
CVE-2020-1890 CVE record

Improper input validation in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp Business for Android
- CWE-20
Not analysed yet 3 Sept 2020
CVE-2020-1886 CVE record

Buffer overflow in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp Business for Android
- Memory corruption
Not analysed yet 3 Sept 2020
CVE-2019-11931 CVE record

Stack-based buffer overflow in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp for iOS
- Memory corruption
Not analysed yet 14 Nov 2019
CVE-2019-11933 CVE record

Buffer overflow in Facebook WhatsApp for Android
- Facebook WhatsApp for Android
- Memory corruption
Not analysed yet 23 Oct 2019
CVE-2019-11927 CVE record

Integer overflow in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp for iOS
- Memory corruption
Not analysed yet 27 Sept 2019
CVE-2018-6350 CVE record

Out-of-bounds read in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp Business for Android
- Memory corruption
Not analysed yet 14 Jun 2019
CVE-2018-6349 CVE record

Stack-based buffer overflow in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp Business for Android
- Memory corruption
Not analysed yet 14 Jun 2019
CVE-2018-6339 CVE record

Stack-based buffer overflow in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp Business for Android
- Memory corruption
Not analysed yet 14 Jun 2019
CVE-2019-3568 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Heap-based buffer overflow in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp Business for Android
- Memory corruption
Not analysed yet 14 May 2019
CVE-2019-3566 CVE record

Improper access control in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp Business for Android
- Broken access control
Not analysed yet 10 May 2019
CVE-2018-6344 CVE record

CVSS 7.5 High

Heap-based buffer overflow in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp for iOS
- Memory corruption
Not analysed yet 31 Dec 2018