CVE-2023-38537
CVE-2023-38537
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 5.6EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
04 oct 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have resulted in app termination or unexpected control flow with very low probability.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
Productos afectados
Facebook · WhatsApp Business for AndroidFacebook · WhatsApp Business for iOSFacebook · WhatsApp Desktop for MacFacebook · WhatsApp Desktop for WindowsFacebook · WhatsApp for AndroidFacebook · WhatsApp for iOS¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →