WhatsApp released the details two main vulnerabilities can be found in non-updated versions of the application. This means that the company responsible for the messaging service already knew about the problems and fixed them, but if you are not using the latest version of the app, it would be a good idea to update it as soon as possible.

The first vulnerability is tracked as CVE-2022-36934 and has a severity rating of 9.8 out of 10 (critical), consists of an integer overflowa common error that basically consists of trying to put a value into an integer variable that is larger than the maximum the variable can support, causing it to overflow.

In the case of a messaging service app owned by Meta, the integer overflow is exploited by sending a specially crafted call to the attacker, opening the door to perform remote attacks that can lead to the installation of malware on the user’s operating system. the victim’s device, which is often done through privilege escalation.

The second vulnerability, listed as CVE-2022-27492, has a severity rating of 7.8 out of 10 (high), allows attackers to remotely execute code after sending a malicious video file. Unfortunately, multimedia files have been one of the most used means of spreading malware for many years, and the fact is that malicious actors would have little success in many cases if they did not deceive staff.

Both vulnerabilities have been patched recently, so we recommend it perform the update process as soon as possible. The WhatsApp versions affected are as follows:

• WhatsApp for Android v2.22.16.12 and earlier
• WhatsApp Business for Android v2.22.16.12 and earlier
• WhatsApp for iOS v2.22.16.12 and earlier
• WhatsApp Business for iOS v2.22.16.12 and earlier

On both Android and iOS, it’s logical to go to the app store and proceed to perform a standard update. However, the great liberties provided by the Google system may mean that someone uses a custom ROM and obtains the APK installer manually, so in this case we recommend uninstalling and reinstalling the app in case the APK file does not work directly with the update.