CVE-2021-24041CWE-122

CVE-2021-24041: vulnerability in Facebook WhatsApp for Android

Published · Updated

Follow this CVE+ Monitor WhatsApp+ Monitor WhatsApp Business

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image.
Affected products
Facebook · WhatsApp Business for AndroidFacebook · WhatsApp for Android
Related CVEs — Facebook WhatsApp for Android

In the same product, most dangerous first.

CVE-2019-3568CRITICALCVE-2019-3568EPSS 30.1%KEVCVE-2019-11933—CVE-2019-11933EPSS 4.1%CVE-2021-24027—CVE-2021-24027EPSS 3.8%CVE-2018-6349—CVE-2018-6349EPSS 2.2%CVE-2018-6344HIGHCVE-2018-6344EPSS 1.9%CVE-2020-1907—CVE-2020-1907EPSS 1.9%