New WhatsApp Bug found in both Android and IoS by Sending Crafted MP4 File
By MYBRANDBOOK
A new critical vulnerability found in both Android/iOS WhatsApp version Let hackers sending a specially crafted MP4 file to WhatsApp user and trigger the stack-based buffer overflow to perform remote code execution and DoS Attack.
The specially crafted MP4 file triggers the remote code execution (RCE) and denial of service (DoS) cyberattack. “The vulnerability is classified as ‘Critical’ severity. It affected an unknown code block of the component MP4 File Handler in WhatsApp,” gbhackers reported.
Facebook said, “A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. “The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE.”
The vulnerability affected the following Versions:
· Android versions prior to 2.19.274
· iOS versions prior to 2.19.100,
· Enterprise Client versions prior to 2.25.3
· Business for Android versions prior to 2.19.104
· Business for iOS versions prior to 2.19.100
· Windows Phone versions before and including 2.18.368
The vulnerability classified as “Critical” Severity that affected an unknown code block of the component MP4 File Handler in WhatsApp. Successful exploitation of this bug leads the manipulation as part of a Message to trigger the Stack-based memory corruption vulnerability in WhatsApp Messenger.
Hackers can take advantage of this vulnerability to deploy the malware on the user’s device to steal sensitive files and also used to surveillance purposes. The RCE vulnerability allows hackers to perform the attack remotely without any sort of authentication.
This is not the first time Remote code execution vulnerability found in WhatApp in this year, we have reported another WhatsApp RCE Vulnerability in last month that allowed remote hackers to steal the files in your Android phone using malformed GIF’s. There is no technical details are available for this critical WhatsApp Vulnerability and an exploit is not available at this moment.
The news comes on the heels an Israeli software Pegasus by cyber intelligence company NSO Group that exploited its video calling system to snoop on 1,400 users globally. In India, the list included human rights activists and journalists. The issue snowballed into a political one and the Indian government denied either purchasing or planning to purchase the infamous software in question.
“We agree with the government of India’s strong statement about the need to safeguard the privacy of all Indian citizens. That is why we’ve taken this strong action to hold cyber attackers accountable and why WhatsApp is so committed to the protection of all user messages through the product we provide,” a WhatsApp spokesperson had said in a statement.
BREAKING NEWS
TECHNO TRENDS
Happiest Minds brings in an innovative GenAI chatbot
Happiest Minds Technologies has announced the new GenAI chatbot - ‘hAPPI...
Government mandates encryption for CCTV cameras to ensure netw
In the wake of issuing an internal advisory on securing CCTV cameras at g...
TRAI recommends allowing only Indian entities to participate i
The Telecom Regulatory Authority of India (TRAI) has recommended that onl...
Galaxy AI is available on more devices with Samsung One UI 6.1
Samsung has expanded the range of smartphones to which One UI 6.1 and Gala...
E-Magazine
TECHNOTAINMENT
Disney+ Hotstar wins the Best OTT Platform of the year
Film Critics Guild and Group M Motion Entertainment, in collaboration with
Miss World 2024: Krystyna Pyszková of the Czech Republic wins
Krystyna Pyszková of the Czech Republic has been crowned as the 71st Miss
MOVERS & SHAKERS
Brillio appoints Ashish Singh to its Board of Directors
Brillio has announced that Ashish Singh has been appointed to the company
JSW One Platforms ropes in Dr Ranjan Pai as Independent Direct
JSW One Platforms, part of US$23 billion JSW Group has appointed Dr Ranjan
OPEN YOUR EYES
INTERVIEWS
Technology and a robust partner network help position Allied T
Allied Telesis in India has a strong and growing team that is very customer
India continues to be a key contributor in Hitachi Vantara’s
The brand strategy of Hitachi Vantara is tied to further expanding the Hita
HOT PICK
HP launches first laptop in India with Microsoft CoPilot butto
HP has launched sleek and stylish Envy x360 14 laptops in India which beco
OnePlus debut its Nord CE4 smartphone
OnePlus Nord CE4 continues the trend of attention-grabbing design with two
MAKE IN INDIA BRANDS
RAMCO SYSTEMS Ltd.
VVDN TECHNOLOGIES
SECUREYE SERVICES PVT. LTD.
FIREBOLTT
EMINENT CIO'S OF INDIA
ICONS OF INDIA
Technology Icons Of India 2023: B.V.R. Subrahmanyam
B.V.R. Subrahmanyam belongs to Andhra Pradesh. He is a 1987-batch IAS ...
Technology Icons Of India 2023: Sridhar Vembu
Sridhar Vembu is an Indian billionaire business magnate and the Founde...
Technology Icons Of India 2023: Roshni Nadar Malhotra
Roshni Nadar Malhotra is an Indian billionaire businesswoman and the c...
PARTNER SPEAKERS
PSU
INDIANOIL helps reach precious petroleum fuels to every nook and corner of the country
IndianOil, a diversified, integrated energy major with presence in alm...
C-DAC keeps India ahead in IT & Electronics R&D space
Centre for Development of Advanced Computing (C-DAC) is the premier R&...
ECIL continues to keep India ahead in the growth of Information Technology and Electronics
ECIL played a very significant role in the training and growth of high...
VIDEOS
Top 25 Brands
Value-Added Distribution
INGRAM MICRO INDIA PVT. LTD.
Ingram Micro India, a large national distributor offers a comprehensiv...
M. TECH SOLUTIONS (I) PVT. LTD.
M.Tech is a leading cyber security and network performance solutions ...
Crayon Software Experts India Pvt Ltd
Crayon helps its customers build the commercial and technical foundati...
ITFORUM 2024
WIITF 2024
CMO of the Year
WOMEN LEADERSHIP
EMINENT CIO's OF INDIA
.jpg)
TRENDS IN TECHNOLOGY
MORE VIDEOS
ADVERTISEMENTS
TECHNOLOGY DISRUPTION
UNICORNS REVOLUTIONISING
