WhatsApp bug let hackers hijack app with a video call, tech websites warn
Messaging system’s owner Facebook fixed the vulnerability in early October, but it is unclear whether the bug was ever used in an attack
A bug in Facebook’s WhatsApp messaging service may have allowed hackers to take over users’ applications when they answered an incoming video call, technology websites ZDnet and The Register reported on Wednesday.
The vulnerability, which affected WhatsApp applications on Apple and Android smartphones, was discovered in late August and was fixed by Facebook in early October, according to a technical disclosure report posted online.
Facebook did not respond to requests for immediate comment. It is unclear whether the bug was ever used in an attack before it was fixed.
“This is a big deal,” Travis Ormandy, a researcher at Google Project Zero which discovered the bug, said on Twitter. “Just ++answering a call from an attacker could completely compromise WhatsApp.”