An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have resulted in an out-of-memory denial of service. This issue would have required the receiver to explicitly open the attachment if it was received from a number not in the receiver’s WhatsApp contacts.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1903
Reference (s):
- https://www.whatsapp.com/security/advisories/2020/
- URL: https://www.whatsapp.com/security/advisories/2020/