WhatsApp Says Two Outdated Software Bugs Addressed After CERT-in Warns User Data at Risk

WhatsApp says it has no reason to believe these vulnerabilities were ever abused.

By Press Trust of India | Updated: 19 April 2021 16:15 IST

WhatsApp Says Two Outdated Software Bugs Addressed After CERT-in Warns User Data at Risk

WhatsApp earlier updated its privacy policy to say that it will share data with its parent firm Facebook

Highlights

CERT-In advisory had warned that users' data was at risk due to flaw
It advised users on older versions of WhatsApp to update to the latest
WhatsApp now says the vulnerabilities have been fixed

WhatsApp on Monday said that it has addressed two bugs that existed on its outdated software and that it had no reason to believe that "these vulnerabilities were ever abused". The official statement came in the wake of a recent advisory issued by the CERT-In, India's cybersecurity agency, which cautioned WhatsApp users about certain vulnerabilities in the app that could lead to breach of sensitive information.

"We regularly work with security researchers to improve the numerous ways WhatsApp protects people's messages. As is typical of software products, we have addressed two bugs that existed on outdated software, and we have no reason to believe that they were ever abused," a WhatsApp spokesperson told PTI in a statement.

The spokesperson added that WhatsApp "remains safe and secure, and end-to-end encryption continues to work as intended to protect people's messages”.

A "high" severity rating advisory issued by the CERT-In, or the Indian Computer Emergency Response Team, on Saturday, had said that the vulnerability has been detected in the software that has "WhatsApp and WhatsApp Business for Android prior to v2.21.4.18 and WhatsApp and WhatsApp Business for iOS prior to v2.21.32”.

"Multiple vulnerabilities have been reported in WhatsApp applications which could allow a remote attacker to execute arbitrary code or access sensitive information on a targeted system," the advisory had said. The advisory had recommended users update their devices with the latest version of WhatsApp from the Google Play store or iOS App Store to counter the vulnerability threat.

CERT-In is the federal technology arm for combating cyberattacks and guarding Indian cyberspace.

Does WhatsApp's new privacy policy spell the end for your privacy? We discussed this on Orbital, the Gadgets 360 podcast. Orbital is available on Apple Podcasts, Google Podcasts, Spotify, and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.