High severity7.5NVD Advisory· Published Sep 3, 2020· Updated Jun 17, 2026
CVE-2020-1890
CVE-2020-1890
Description
A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malformed data to load an image from a sender-controlled URL without user interaction.
Affected products
3- Range: <2.20.11
2.20.2+ 1 more
- (no CPE)range: 2.20.2
- (no CPE)range: 2.20.11
Patches
Vulnerability mechanics
References
1- www.whatsapp.com/security/advisories/2020nvdVendor Advisory
News mentions
0No linked articles in our index yet.