Vulnerability Description
An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have resulted in an out-of-memory denial of service. This issue would have required the receiver to explicitly open the attachment if it was received from a number not in the receiver's WhatsApp contacts.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| < 2.20.61 | ||
| Whatsapp Business | < 2.20.61 |
Related Weaknesses (CWE)
References
- https://www.whatsapp.com/security/advisories/2020/Vendor Advisory
- https://www.whatsapp.com/security/advisories/2020/Vendor Advisory
FAQ
What is CVE-2020-1903?
CVE-2020-1903 is a vulnerability with a CVSS score of 5.5 (MEDIUM). An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have resulted in an out-of-memory denial of service. ...
How severe is CVE-2020-1903?
CVE-2020-1903 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-1903?
Check the references section above for vendor advisories and patch information. Affected products include: Whatsapp Whatsapp, Whatsapp Whatsapp Business.