CVE-2021-24035 | BDVDB-2026-155335 Detail

FacebookWhatsApp Business for Android

Description#

A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-23 Relative Path Traversal

References#

https://www.whatsapp.com/security/advisories/2021/

Exploit#

No public exploit known

History#

Version 12021-06-11Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.