WhatsApp Vulnerability Could Lead to User Account Hacks, Warns CERT-In

The Indian cybersecurity agency CERT-In has issued a "high" severity rating advisory for the flaw detected in WhatsApp.

By Press Trust of India | Updated: 19 April 2021 10:01 IST

Highlights

Multiple vulnerabilities have been reported in WhatsApp applications
It could allow a remote attacker to execute arbitrary code
Advisory added users of app should update the latest version of WhatsApp

WhatsApp Vulnerability Could Lead to User Account Hacks, Warns CERT-In

These vulnerabilities exist in WhatsApp applications due to a cache configuration issue

Country's cyber security agency CERT-In has cautioned WhatsApp users about certain vulnerabilities detected in the popular instant messaging app that could lead to breach of sensitive information.

A "high" severity rating advisory issued by the CERT-In, or the Indian Computer Emergency Response Team, said the vulnerability has been detected in software that has "WhatsApp and WhatsApp Business for Android prior to v2.21.4.18 and WhatsApp and WhatsApp Business for iOS prior to v2.21.32."

The v2.21.4.18 and v2.21.32 denotes the versions of the WhatsApp messenger that are downloaded by users for using the platform on their mobile or computer devices.

WhatsApp Online Status Feature Could Let Anyone to Stalk You. Here’s How

The CERT-In is the national technology arm to combat cyber attacks and guarding the Indian cyber space.

"Multiple vulnerabilities have been reported in WhatsApp applications which could allow a remote attacker to execute arbitrary code or access sensitive information on a targeted system," the advisory issued on Saturday said.

Describing the risk in detail, it said that these vulnerabilities "exist in WhatsApp applications due to a cache configuration issue and missing bounds check within the audio decoding pipeline."

WhatsApp Enables Disappearing Messages Feature for All Users in Group Chats

"Successful exploitation of these vulnerabilities could allow the attacker to execute arbitrary code or access sensitive information on a targeted system," it said.

The advisory added that users of the app should update the latest version of WhatsApp from Google Play Store or iOS App Store to counter the vulnerability threat.

Is OnePlus 9R old wine in a new bottle — or something more? We discussed this on Orbital, the Gadgets 360 podcast. Later (starting at 23:00), we talk about the new OnePlus Watch. Orbital is available on Apple Podcasts, Google Podcasts, Spotify, and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.