CVE-2022-27492: WhatsApp

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file.

Affected products

• WhatsApp WhatsApp: before 2.22.15.9 (fixed in 2.22.15.9); before 2.22.16.2 (fixed in 2.22.16.2)

Published 2022-09-23. Last modified 2026-06-17.