Natalie Silvanovich, a Google Project Zero security researcher, has uncovered a critical security flaw in WhatsApp. The flaw could allow a notorious actor to make a video call and take complete control of your messaging application.
Memory corruption bug in WhatsApp's non-WebRTC video conferencing implementation https://t.co/5sCmNznh4P
— Natalie Silvanovich (@natashenka) October 9, 2018
The bug report of the flaw states: “Heap corruption can occur when the WhatsApp mobile application receives a malformed RTP (Real-time Transport Protocol) packet.” This results in the crashing of WhatsApp app.
The Hacker News notes that the web client of WhatsApp remains unaffected by the flaw as it uses WebRTC for video call, instead of RTP.
The bug report further mentions that both the Android and iPhone applications are affected by the flaw. It also describes the steps to reproduce the issue.
The latest version of WhatsApp has fixed the issue; the Android version received the fix on September 28 and iPhone version got the same on October 3. It goes without saying that it’s advisable for you to update your apps in case you haven’t done so in past weeks.
Also Read: Hashtopolis v0.8 released: A Hashcat wrapper for distributed hashcracking
That’s truth! It scares the hell out of me that somebody can so easily control your personal life and to know about all your secrets. Literally anybody can download the spying app like https://www.hoverwatch.com and boom you’re a victim of some creepy stalker. It’s just so disgusting that people have no respect against each other and cross the line of privacy in such a rude way.
ReplyDeleteNo tienes que rootear o jailbreak al Android o iPhone respectivamente para espiar el WhatsApp de otro teléfono. Es compatible con el chat de WhatsApp. espiar whatsapp de otro movil
ReplyDeleteThe client won't be influenced in any capacity when the call is sent to the software. https://callgear.com/
ReplyDeleteOur nation's defense contractors and tech universities are crawling with spies, some are pretty good looking as I understand it, here
ReplyDeleteGood post but I was wondering if you could write a litte more on this subject? I’d be very thankful if you could elaborate a little bit further. Appreciate it! Plus
ReplyDeleteAll things considered, relatively few websites need to connection to a website containing trash. dark web links
ReplyDelete