WhatsApp video security flaw leaves devices open to attack - Android

No matter how hard companies try to secure their platforms and services, vulnerabilities and bugs will always slip through the cracks. That’s exactly what happened last week when Facebook announced a severe video security flaw in messaging app WhatsApp.

The bug is a stack-based buffer overflow issue attackers can trigger by sending a “specially crafted MP4 file.” This exploit can cause denial-of-service or remote code execution attacks.

It works because of how the service parses MP4 elementary stream metadata. This WhatsApp video security flaw is present on Android app versions prior to 2.19.274 and iOS app versions prior to 2.19.100. It also affects prior versions of the WhatsApp enterprise, Windows Phone, Business for Android, and Business for iOS clients.

It doesn’t look like the bug has been actively exploited, but users should update their apps to alleviate the risk of attack.

More posts about WhatsApp

You will soon see shopping catalogs on WhatsApp

Adamya Sharma 2 weeks ago

WhatsApp appears to be severely draining battery life on some OnePlus devices

Phillip Prado 2 weeks ago

RCS vs WhatsApp: Thoughts from a long-time WhatsApp user

Jimmy Westenberg 2 weeks ago

WhatsApp introduces new group chat privacy settings

Phillip Prado 2 weeks ago

First formal step taken in integrating Facebook, Instagram, WhatsApp, Messenger

C. Scott Brown 2 weeks ago

WhatsApp now supports fingerprint lock on Android

Phillip Prado 3 weeks ago

WhatsApp tipped to get disappearing messages soon: Here’s how it works

Hadlee Simons 2 months ago

10 best video chat apps for Android!

Joe Hindy 2 months ago

21 essential WhatsApp tricks and tips you should know

Hadlee Simons 2 months ago

Google Assistant can now place your WhatsApp video and audio calls

C. Scott Brown 2 months ago