Government has a warning for these WhatsApp users: What is it and how one can be safe – Times of India
Indian Computer Emergency Response Team (CERT-IN) has recently issued a new warning for WhatsApp users. The government body has confirmed multiple vulnerabilities in the instant messaging app. Also, it has categorised the threat as ‘high severity’.
Those who are unaware, CERT-IN is a nodal agency under the Ministry of Electronics and Information Technology. It deals with cybersecurity threats like phishing and hacking.
What government has said
According to the government’s latest warning, there are several vulnerabilities in select versions of WhatsApp. “Multiple Vulnerabilities have been reported in WhatsApp which could be exploited by a remote attacker to execute arbitrary code on the targeted system.”
Warning description
According to CERT, the app contains an issue with CVE-2022-36934 which is due to integer overflow that will allow attackers to exploit this to execute remote code in an established video call. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the targeted system.
Another warning is for the vulnerability CVE-2022-27492 which is again due to the integer overflow and it can allow remote attackers to exploit it by sending a specifically-crafted video file.
Who’s affected
According to CERT, the vulnerabilities have been found in both Android and iOS versions of the app which include:
WhatsApp for Android and iOS prior to v2.22.16.12
WhatsApp Business for Android and iOS prior to v2.22.16.12 • WhatsApp for Android prior to v2.22.16.2
WhatsApp for iOS v2.22.15.9
What’s the solution
CERT has advised users to update their WhatsApp app with the latest version. Thankfully, WhatsApp’s official post also clarifies that the latest WhatsApp update carries the fix for the above-mentioned vulnerabilities.
Those who are unaware, CERT-IN is a nodal agency under the Ministry of Electronics and Information Technology. It deals with cybersecurity threats like phishing and hacking.
What government has said
According to the government’s latest warning, there are several vulnerabilities in select versions of WhatsApp. “Multiple Vulnerabilities have been reported in WhatsApp which could be exploited by a remote attacker to execute arbitrary code on the targeted system.”
Warning description
According to CERT, the app contains an issue with CVE-2022-36934 which is due to integer overflow that will allow attackers to exploit this to execute remote code in an established video call. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the targeted system.
Another warning is for the vulnerability CVE-2022-27492 which is again due to the integer overflow and it can allow remote attackers to exploit it by sending a specifically-crafted video file.
Who’s affected
According to CERT, the vulnerabilities have been found in both Android and iOS versions of the app which include:
WhatsApp for Android and iOS prior to v2.22.16.12
WhatsApp Business for Android and iOS prior to v2.22.16.12 • WhatsApp for Android prior to v2.22.16.2
WhatsApp for iOS v2.22.15.9
What’s the solution
CERT has advised users to update their WhatsApp app with the latest version. Thankfully, WhatsApp’s official post also clarifies that the latest WhatsApp update carries the fix for the above-mentioned vulnerabilities.
For all the latest Technology News Click Here
For the latest news and updates, follow us on Google News.
Denial of responsibility! TechNewsBoy.com is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected]. The content will be deleted within 24 hours.
