Wiz
Vulnerability DatabaseCVE-2022-36934

CVE-2022-36934: 
WhatsApp vulnerability analysis and mitigation

Overview

A critical integer overflow vulnerability (CVE-2022-36934) was discovered in WhatsApp's video call functionality. The vulnerability, assigned a CVSS score of 9.8, affects WhatsApp and WhatsApp Business for both Android and iOS platforms in versions prior to v2.22.16.12. The flaw was discovered by WhatsApp's internal security team in 2022 (WhatsApp Advisory, CERT-EU).

Technical details

The vulnerability resides in the Video Call Handler component of WhatsApp. The integer overflow condition could trigger a heap-based buffer overflow, which occurs when an integer value gets assigned a value too large to store in the reserved representation. This could lead to memory corruption and potential code execution. The critical severity is reflected in its CVSS score of 9.8 (CERT-EU, Hacker News).

Impact

If successfully exploited, the vulnerability could allow an attacker to execute arbitrary code on the target device during an established video call, potentially leading to complete control of the WhatsApp messenger application (Security Online, CERT-EU).

Mitigation and workarounds

WhatsApp has released security updates to address this vulnerability. Users are recommended to update to version v2.22.16.12 or later for both WhatsApp and WhatsApp Business on Android and iOS platforms (Security Online, CERT-EU).

Additional resources

Source: This report was generated using AI

Related WhatsApp vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-30401MEDIUM6.7
  • WhatsAppWhatsApp
  • whatsapp
NoYesApr 05, 2025
CVE-2023-38537MEDIUM5.6
  • WhatsAppWhatsApp
  • cpe:2.3:a:whatsapp:whatsapp
NoYesOct 04, 2023
CVE-2025-55179MEDIUM5.4
  • WhatsAppWhatsApp
  • cpe:2.3:a:whatsapp:whatsapp
NoYesNov 18, 2025
CVE-2025-55177MEDIUM5.4
  • WhatsAppWhatsApp
  • whatsapp
YesYesAug 29, 2025
CVE-2023-38538MEDIUM5
  • WhatsAppWhatsApp
  • whatsapp
NoYesOct 04, 2023

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo