Never miss a great news story!
Get instant notifications from Economic Times
AllowNot now


You can switch off notifications anytime using browser settings.
11,910.1553.35
Stock Analysis, IPO, Mutual Funds, Bonds & More

Love using GIFs on WhatsApp? A security bug may allow access to your device

The bug also works for Android 8.1 and Android 9.0 OS but does not work for Android 8.0 and below.

IANS|
Oct 03, 2019, 04.06 PM IST
0Comments
Agencies
thumb1
The flaw resided in WhatsApp's Gallery view implementation that is used to generate previews for photographs, videos and GIFs.
SAN FRANCISCO: A security bug has been found in Facebook-owned instant messenger WhatsApp that could let attackers to obtain access to a device and steal data by sending a malicious GIF file.

The danger stems from a double-free bug in WhatsApp, according to a researcher going by the nickname Awakened, The Next Web reported on Wednesday.

A double-free vulnerability is a memory corruption anomaly that could crash an application or open up an exploit vector that attackers can abuse to gain access to users' device.

According to Awakened's post on GitHub, the flaw resided in WhatsApp's Gallery view implementation that is used to generate previews for photographs, videos and GIFs.

All it takes to perform the attack is to craft a malicious GIF, and wait for the user to open the WhatsApp gallery, the report added.

"The exploit works well until WhatsApp version 2.19.230. The vulnerability is officially patched in WhatsApp version 2.19.244," wrote the researcher.

The bug also works for Android 8.1 and Android 9.0 OS but does not work for Android 8.0 and below.

In the older Android versions, double-free could still be triggered. However, because of the malloc calls by the system after the double-free, the app just crashes before reaching to the point that we could control the PC register, according to a report in Gizmodo.

From WhatsApp To YouTube, Tech Updates That Will Impact Your Digital Life

of 3
Next
Prev
Play Slideshow

Time For An Upgrade

26 Jul, 2018
Everyone knows about the big product launches and global news. However, there are a number of small but significant updates that slip under the radar. Here's a round-up of some of the announcements that will possibly have an impact on your digital life.
Next

Want stories like this in your inbox? Sign up for the daily ET Panache newsletter.

You can also follow us on Facebook, Twitter and LinkedIn.

Also Read

WhatsApp ‘exits’ accounts of J&K users

WhatsApp snooping row: Baghel orders probe

WhatsApp introduces catalogs for small businesses

WhatsApp introduces 'Catalogs' for small businesses

Snooping boosts government's WhatsApp traceability case

Comments
Add Your Comments
Commenting feature is disabled in your country/region.
Download The Economic Times Business News App for the Latest News in Business, Sensex, Stock Market Updates & More.

Popular Categories


Other useful Links


Follow us on


Download et app


Copyright © 2019 Bennett, Coleman & Co. Ltd. All rights reserved. For reprint rights: Times Syndication Service