Advisories · Technology

Facebook WhatsApp for iOS.

Every CVE that names Facebook WhatsApp for iOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-23866 CVE record

CVSS 4.3 Medium

Facebook WhatsApp for Android: Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for…
- Facebook WhatsApp for Android
- Facebook WhatsApp for iOS
- CWE-940
Not analysed yet 1 May 2026
CVE-2025-55179 CVE record

CVSS 5.4 Medium

Facebook WhatsApp Business for iOS: Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73…
- Facebook WhatsApp Business for iOS
- Facebook WhatsApp for iOS
Not analysed yet 18 Nov 2025
CVE-2025-55177 CVE record

CVSS 5.4 MediumCritical · KEVKEV

Incorrect authorization in Facebook WhatsApp Desktop for Mac and others
- Facebook WhatsApp Desktop for Mac
- Facebook WhatsApp Business for iOS
- Broken access control
Not analysed yet 29 Aug 2025
CVE-2023-38538 CVE record

CVSS 5.0 Medium

A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app termination or unexpected control flow with very low probabi…
- Facebook WhatsApp Desktop for Mac
- Facebook WhatsApp Desktop for Windows
Not analysed yet 4 Oct 2023
CVE-2023-38537 CVE record

CVSS 5.6 Medium

A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have resulted in app termination or unexpected…
- Facebook WhatsApp Desktop for Mac
- Facebook WhatsApp Desktop for Windows
Not analysed yet 4 Oct 2023
CVE-2021-24042 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Heap-based buffer overflow in Facebook WhatsApp Desktop and others
- Facebook WhatsApp Desktop
- Facebook WhatsApp for KaiOS
- Memory corruption
Not analysed yet 4 Jan 2022
CVE-2021-24026 CVE record

Out-of-bounds write in Facebook WhatsApp Business for iOS and others
- Facebook WhatsApp Business for iOS
- Facebook WhatsApp for iOS
- Memory corruption
Not analysed yet 6 Apr 2021
CVE-2020-1909 CVE record

Use after free in Facebook WhatsApp Business for iOS and others
- Facebook WhatsApp Business for iOS
- Facebook WhatsApp for iOS
- Memory corruption
Not analysed yet 3 Nov 2020
CVE-2020-1908 CVE record

Improper authorization in Facebook WhatsApp Business for iOS and others
- Facebook WhatsApp Business for iOS
- Facebook WhatsApp for iOS
- Broken access control
Not analysed yet 3 Nov 2020
CVE-2020-1907 CVE record

Out-of-bounds write in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp Business for Android
- Memory corruption
Not analysed yet 6 Oct 2020
CVE-2020-1904 CVE record

Path traversal in Facebook WhatsApp for iOS and others
- Facebook WhatsApp for iOS
- Facebook WhatsApp Business for iOS
- Path traversal
Not analysed yet 6 Oct 2020
CVE-2020-1903 CVE record

Uncontrolled resource consumption in Facebook WhatsApp for iOS and others
- Facebook WhatsApp for iOS
- Facebook WhatsApp Business for iOS
- Denial of service
Not analysed yet 6 Oct 2020
CVE-2020-1901 CVE record

Uncontrolled resource consumption in Facebook WhatsApp for iOS
- Facebook WhatsApp for iOS
- Denial of service
Not analysed yet 6 Oct 2020
CVE-2019-11931 CVE record

Stack-based buffer overflow in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp for iOS
- Memory corruption
Not analysed yet 14 Nov 2019
CVE-2019-11927 CVE record

Integer overflow in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp for iOS
- Memory corruption
Not analysed yet 27 Sept 2019
CVE-2018-6350 CVE record

Out-of-bounds read in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp Business for Android
- Memory corruption
Not analysed yet 14 Jun 2019
CVE-2018-20655 CVE record

Stack-based buffer overflow in Facebook WhatsApp for iOS and others
- Facebook WhatsApp for iOS
- Facebook WhatsApp Business for iOS
- Memory corruption
Not analysed yet 14 Jun 2019
CVE-2019-3568 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Heap-based buffer overflow in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp Business for Android
- Memory corruption
Not analysed yet 14 May 2019
CVE-2018-6344 CVE record

CVSS 7.5 High

Heap-based buffer overflow in Facebook WhatsApp for Android and others
- Facebook WhatsApp for Android
- Facebook WhatsApp for iOS
- Memory corruption
Not analysed yet 31 Dec 2018