CVE-2023-38537: WhatsApp

Medium severity, CVSS 5.6. EPSS: 0.3% chance of exploitation in the next 30 days.

A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have resulted in app termination or unexpected control flow with very low probability.

Affected products

• WhatsApp WhatsApp: before 2.2338.12 (fixed in 2.2338.12)

Published 2023-10-04. Last modified 2026-06-17.