Medium severity5.5NVD Advisory· Published Oct 6, 2020· Updated Jun 17, 2026

CVE-2020-1904

Description

A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal overwriting files when sending specially crafted docx, xlsx, and pptx files as attachments to messages.

Affected products

Whatsapp/WhatsApp Businessllm-fuzzy
Range: <2.20.61
Whatsapp/Whatsappllm-fuzzy
Range: <2.20.61
Facebook/WhatsApp Businesscpe-rescue
Range: 2.20.61
Facebook/WhatsApp for iPhonecpe-rescue
Range: 2.20.61

Patches

Vulnerability mechanics

References

www.whatsapp.com/security/advisories/2020/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000