Critical severity9.8NVD Advisory· Published Apr 6, 2021· Updated Jun 17, 2026

CVE-2021-24026

Description

A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v2.21.3, WhatsApp for iOS prior to v2.21.32, and WhatsApp Business for iOS prior to v2.21.32 could have allowed an out-of-bounds write.

Affected products

Whatsapp/WhatsApp for Androidllm-fuzzy
Range: <2.21.3
Whatsapp/WhatsApp Businessllm-fuzzy
Range: <2.21.32
Whatsapp/Whatsappllm-fuzzy
Range: <2.21.32
Facebook/WhatsApp for Androidcpe-rescue2 versions
unspecified+ 1 more
- (no CPE)range: unspecified
- (no CPE)range: unspecified
Facebook/WhatsApp Businesscpe-rescue
Range: unspecified
Facebook/WhatsApp for iPhonecpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

www.whatsapp.com/security/advisories/2021/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000