← back
CVE-2020-1903

CVE-2020-1903

EPSS 0.7%CWE-400
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS EPSS 0.7%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
06 Oct 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have resulted in an out-of-memory denial of service. This issue would have required the receiver to explicitly open the attachment if it was received from a number not in the receiver's WhatsApp contacts.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →