Critical severity9.8NVD Advisory· Published Jun 14, 2019· Updated Jun 17, 2026

CVE-2018-6350

Description

An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. This issue affects WhatsApp for Android prior to 2.18.276, WhatsApp Business for Android prior to 2.18.99, WhatsApp for iOS prior to 2.18.100.6, WhatsApp Business for iOS prior to 2.18.100.2, and WhatsApp for Windows Phone prior to 2.18.224.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Whatsapp/WhatsApp for Androidllm-fuzzy
Range: <2.18.276
Whatsapp/WhatsApp Businessllm-fuzzy
Range: <2.18.100.2
Whatsapp/WhatsApp for iPhonellm-fuzzy
Range: <2.18.100.6
Facebook/WhatsAppllm-fuzzy
Range: <2.18.276, <2.18.99, <2.18.100.6, <2.18.100.2, <2.18.224
Facebook/WhatsApp for Androidcpe-rescue2 versions
2.18.99+ 1 more
- (no CPE)range: 2.18.99
- (no CPE)range: 2.18.276
Facebook/WhatsApp Businesscpe-rescue
Range: 2.18.100.2
Facebook/WhatsApp for iPhonecpe-rescue2 versions
2.18.100.6+ 1 more
- (no CPE)range: 2.18.100.6
- (no CPE)range: 2.18.224

Patches

Vulnerability mechanics

References

www.facebook.com/security/advisories/cve-2018-6350/nvdThird Party Advisory
www.securityfocus.com/bid/108803nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000