Horizon Alert
Summary of the vulnerability and why it matters
A vulnerability exists within the WhatsApp voice-over-IP (VOIP) calling feature. This flaw allows for remote code execution on affected devices. The potential business impact could involve unauthorized access to devices and data.
- Vulnerable WhatsApp VOIP stack
- Buffer overflow from crafted network packets
- Remote code execution on target devices
Attack Path
How an attacker could exploit the issue
A buffer overflow in the WhatsApp VOIP stack allows attackers to execute remote code. This occurs when specially crafted RTCP packets are sent to a target phone number. The vulnerability is accessible over the network and does not require user interaction or prior access to the system.
- Exposed network service
- Attacker sends crafted packets
- Remote code execution
Live Threat
Current exploitation, exposure, and threat context
A remote code execution vulnerability in WhatsApp's VOIP stack could allow attackers to compromise user devices by sending specially crafted network packets. This could lead to the execution of malicious code on affected devices, potentially impacting confidentiality, integrity, and availability of data and systems. The known exploitability and high severity suggest a significant business risk.
- Attacker skill level: Low
- Required access or conditions: Network access to target number
- Business risk or urgency: High
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
A buffer overflow vulnerability within the WhatsApp VOIP stack presented a critical risk, enabling remote code execution through specially crafted network packets. This exploit targeted the ability to send malicious data to a specific phone number. The identified vulnerability affects various versions of WhatsApp and WhatsApp Business across multiple platforms, including Android, iOS, Windows Phone, and Tizen.
- Identify all affected WhatsApp assets.
- Reduce exposure by updating WhatsApp.
- Verify updates and monitor for issues.
