VULNERABILITY INTELLIGENCE

CVE-2021-24041

CVSS score9.8 CRITICAL
EPSS probability1.25%
CISA KEVNot currently listed
Published2021-12-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image.

Weakness classification

  • cve-assign@fb.com: CWE-122
  • nvd@nist.gov: CWE-787

Primary references