Back to Database
Status published
Critical
CVE-2018-6349
When receiving calls using WhatsApp for Android, a missing size...
Vulnerability Description
When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for Android prior to 2.18.248 and WhatsApp Business for Android prior to 2.18.132.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-6349
Credits & Attribution
No credits recorded in the NVD database.
References
More from Facebook
View All →CVE-2025-64296
WordPress Facebook for WooCommerce plugin <= 3.5.7 - Broken Access Control to Notice Dismissal vulnerability
Medium
5.3
CVE-2025-55181
Sending an HTTP request/response body with greater than 2^31 bytes...
Medium
5.3
CVE-2025-55179
Incomplete validation of rich response messages in WhatsApp for iOS...
Medium
5.4
CVE-2025-55177
Incomplete authorization of linked device synchronization messages in WhatsApp for...
Medium
5.4
CVE-2025-30403
A heap-buffer-overflow vulnerability is possible in mvfst via a specially...
Unknown
0
Affected Vendor
Affected Software
WhatsApp for Android, WhatsApp Business for Android
Vulnerable Versions:
2.18.248, unspecified, 2.18.132
Timeline
Official Publish:
June 14th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H