WhatsApp Incomplete Validation of Rich Response Messages Leading to Arbitrary Media Processing Vulnerability
Vulnerability
A vulnerability exists in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac v2.25.23.83. This vulnerability stems from incomplete validation of rich response messages, which could have allowed a user to initiate the processing of media content from an arbitrary URL on another user’s device.
Impact
Exploitation of this vulnerability could have led to unauthorized processing of media content on a user's device, potentially allowing for the interception or manipulation of media.
Remediation
Users can update to WhatsApp for iOS v2.25.23.73 or later, WhatsApp Business for iOS v2.25.23.82 or later, and WhatsApp for Mac v2.25.23.83 or later.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.