CVE-2018-6344highCWE-122

CVE-2018-6344: high-severity vulnerability in Facebook WhatsApp for Android

Published · Updated

Follow this CVE+ Monitor WhatsApp+ Monitor WhatsApp for Windows Phone

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 1.9%
A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to v2.18.172.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Facebook · WhatsApp for AndroidFacebook · WhatsApp for iOSFacebook · WhatsApp for Windows Phone
Related CVEs — Facebook WhatsApp for Android

In the same product, most dangerous first.

CVE-2019-3568CRITICALCVE-2019-3568EPSS 30.1%KEVCVE-2025-55177MEDIUMCVE-2025-55177EPSS 13.5%KEVCVE-2019-11933—CVE-2019-11933EPSS 4.1%CVE-2021-24027—CVE-2021-24027EPSS 3.8%CVE-2020-1909—CVE-2020-1909EPSS 2.3%CVE-2018-6349—CVE-2018-6349EPSS 2.2%