New WhatsApp Bug Via MP4 File Lets Hackers Snoop Into Your Device

WhatsApp is a common platform used by millions to share photos and videos besides the rest. So, it is understood that you will get numerous files on the platform. But if you receive an MP4 file on WhatsApp, then you need to refrain yourself from downloading it as a new bug has been discovered by security experts.

Well, the newly-discovered WhatsApp bug is said to let hackers cause a critical vulnerability in the instant messaging app and execute a snooping attack on users. Going by a report by gbhackers, the MP4 file said to be causing havoc can affect both iOS and Android devices.

WhatsApp Bug In The Form Of MP4 File

The specially designed MP4 file is said to trigger the RCE (Remote Code Execution) and DoS (Denial of Service) cyberattack. This vulnerability is grouped to be critical and cause severity. It has affected an unknown code block of the MP4 File Handler within WhatsApp, claims the report.

In response to the same, Facebook stated that an overflow of the stack-based buffer could be triggered in WhatsApp by this MP4 file in question. The file can result in RCE or DoS, the company confirmed.

This information comes soon after Pegasus, an Israeli software by cyber intelligence company NSO Group exploited its video calling system to snoop on 1400 users across the world. The list includes journalists and human rights activists in India. The issue turned into a political one and the Indian government denied purchasing or being in plans of purchasing the software.

How WhatsApp MP4 Bug Can Be Harmful

The MP4 file vulnerability has been found in the Android versions before 2.19.274 and iOS versions prior to 2.19.100. Also, the Enterprise Client versions before 2.25.3 and Windows Phone versions of the app before 2.18.368 are said to have been affected.

It has not spared the business version of the app as the WhatsApp Business for Android versions before 2.19.104 and WhatsApp Business for iOS versions before and including 2.18.368 has been found to be vulnerable. To stay safe, it is important to update WhatsApp on your device to the latest version to avoid the bug from affecting you and stay safe.

With this vulnerability, hackers and deploy malware on the device of users and steal sensitive files. Also, it can be used for surveillance purposes. Notably, the report adds that the RCE vulnerability lets hackers perform a remote attack sans authentication.