CVE-2020-1906: 
WhatsApp vulnerability analysis and mitigation

A buffer overflow vulnerability was identified in WhatsApp for Android prior to version 2.20.130 and WhatsApp Business for Android prior to version 2.20.46. The vulnerability, tracked as CVE-2020-1906, was disclosed on October 6, 2020, and affected the video processing functionality of the application (NVD).

The vulnerability is characterized as a buffer overflow that could allow an out-of-bounds write when processing malformed local videos with E-AC-3 audio streams. The vulnerability received a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local access requirements with low attack complexity (NVD).

The successful exploitation of this vulnerability could lead to high impacts on confidentiality, integrity, and availability of the affected system. The high CVSS score indicates that successful exploitation could potentially allow an attacker to execute arbitrary code or cause system crashes (NVD).

Users should update their WhatsApp for Android to version 2.20.130 or later, and WhatsApp Business for Android to version 2.20.46 or later to protect against this vulnerability (NVD).