Facebook WhatsApp for Android vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Facebook WhatsApp for Android: 2 record(s), with affected versions and fixes.
CVE-2026-23866
Medium · 4.3
CWE-940 May 1, 2026
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for…
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device, including triggering OS-controlled custom URL scheme handlers. We have not seen evidence of exploitation in the wild.
CVE-2019-3568
Critical · 9.8
KEV High · 63 CWE-787 May 14, 2019
WhatsApp VOIP Stack Buffer Overflow Vulnerability
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15.