{"id":"CVE-2022-36934","aliases":["EUVD-2022-39592","GHSA-h9c4-pjqq-xffc"],"status":"published","title":"An integer overflow in WhatsApp could result in remote code execution in an established video call.","description":"An integer overflow in WhatsApp could result in remote code execution in an established video call.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02458,"percentile":0.84542,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-122","CWE-190"],"published":"2022-09-22T21:30:11Z","modified":"2026-06-17T04:54:18Z","exploits":[{"source":"pocgithub","id":"tdawg506/mailenable-cve-2022-36934","title":"tdawg506/mailenable-cve-2022-36934","date":"2025-07-11","url":"https://github.com/tdawg506/mailenable-cve-2022-36934"}],"products":[{"vendor":"facebook","product":"whatsapp business for android"},{"vendor":"facebook","product":"whatsapp business for ios"},{"vendor":"facebook","product":"whatsapp for android"},{"vendor":"facebook","product":"whatsapp for ios"},{"vendor":"meta","product":"whatsapp business for android"},{"vendor":"meta","product":"whatsapp business for ios"},{"vendor":"meta","product":"whatsapp for android"},{"vendor":"meta","product":"whatsapp for ios"},{"vendor":"whatsapp","product":"whatsapp"},{"vendor":"whatsapp","product":"whatsapp_business"}],"references":[{"url":"https://www.whatsapp.com/security/advisories/2022/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36934"},{"url":"https://www.whatsapp.com/security/advisories/2022"},{"url":"https://github.com/advisories/GHSA-h9c4-pjqq-xffc"}],"sources":{"cve":[{"id":"CVE-2022-36934","description":"An integer overflow in WhatsApp could result in remote code execution in an established video call.","status":"published","published":"2022-09-22T21:30:11Z","modified":"2025-05-27T16:05:50.201Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:34:35.615708Z"}],"euvd":[{"id":"EUVD-2022-39592","description":"An integer overflow in WhatsApp could result in remote code execution in an established video call.","status":"published","published":"2022-09-22T21:30:11Z","modified":"2025-05-27T16:05:50Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:38.348652Z"}],"ghsa":[{"id":"GHSA-h9c4-pjqq-xffc","title":"An integer overflow in WhatsApp could result in remote code execution in an established video call.","description":"An integer overflow in WhatsApp could result in remote code execution in an established video call.","status":"published","published":"2022-09-23T00:00:29Z","modified":"2025-05-27T18:31:48Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-122","CWE-190"],"updated_at":"2026-11-02T15:02:27.370745Z"}],"nvd":[{"id":"CVE-2022-36934","description":"An integer overflow in WhatsApp could result in remote code execution in an established video call.","status":"published","published":"2022-09-22T22:15:09.627Z","modified":"2026-06-17T04:54:18.773Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-122","CWE-190"],"updated_at":"2026-11-02T14:07:28.501364Z"}]}}