CVE-2020-1901: WhatsApp

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

Receiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have caused the application to freeze while processing the message.

Affected products

• WhatsApp WhatsApp: before 2.20.91.4 (fixed in 2.20.91.4)

Published 2020-10-06. Last modified 2026-06-17.