Do You Really Need to Update Whatsapp Right Now

WhatsApp is the world’s most popular chat app, making it the perfect platform for spreading misinformation and lies. You can waste your time begging your relatives not to believe everything they read in WhatsApp threads, often to no avail. However, there is finally some WhatsApp news worth spreading as widely as possible: you need to update WhatsApp right now. Tell your parents.

What problems has WhatsApp fixed?

Unlike my usual security update messages, there is no new version of WhatsApp today. Instead, WhatsApp has discovered two critical security vulnerabilities affecting older versions of its iOS and Android apps. If you haven’t updated the WhatsApp app for a long time, your security is at risk.

Both issues flagged by WhatsApp are “integer overflow” vulnerabilities that occur when a program attempts to move a value into a space not large enough to store it . An attacker could exploit this vulnerability by bypassing security checks to ensure that a particular value meets a certain threshold. Once these security walls are down, these attackers will be able to install and run their own code on your smartphone in what is known as “remote code execution”.

The first vulnerability, designated CVE-2022-36934, allows attackers to initiate remote code execution with a simple video call. All you have to do is answer the call and your phone may be infected. The second vulnerability, CVE-2022-27492, allows remote code execution through a malicious video file.

The ease with which hackers can exploit these security vulnerabilities makes them especially serious. Users need to do very little to put themselves in harm’s way, so fixing your app as soon as possible is a top priority.

What versions of WhatsApp are safe?

WhatsApp reports that the more severe vulnerability CVE-2022-36934 affects WhatsApp for iOS, WhatsApp for Android, WhatsApp Business for iOS, and WhatsApp Business for Android up to version 2.22.16.12. CVE-2022-27492 does not actually threaten WhatsApp Business, but only affects WhatsApp for iOS up to version 2.22.15.9 and WhatsApp for Android up to version 2.22.16.2.

WhatsApp for Android and WhatsApp Business for Android are currently at version 2.22.19.76, while WhatsApp for iOS and WhatsApp Business for iOS are at version 2.22.19.78, so if you’ve updated your app in the past month or so, you should be safe. However, you should check for updates now just in case.

These vulnerabilities are especially relevant for those who do not update their WhatsApp applications often (or never). We all know people who are lazy about updates (maybe you are one of them). It’s okay to miss out on the latest features, but leaving yourself open to security vulnerabilities is not.

Before anyone calls this news another WhatsApp rumor or a disinformation stunt, reiterate that it is not. We cover it, The Verge covers it , and WhatsApp themselves have announced security updates . While you’re at it, remind your parents not to answer weird video calls or open unknown files (videos or whatever).

How to update WhatsApp on iPhone and Android

Luckily, updating the WhatsApp or WhatsApp Business app on any smartphone is very easy.

On Android, go to the Play Store, tap your profile icon, then tap ” App & device management “. Find WhatsApp or WhatsApp Business, then click Update if available. If you have Enable Automatic Updates turned on, Android may have already updated WhatsApp for you.

On iPhone, open the App Store, then tap your profile icon. Pull the page down to refresh it, then check the app’s update list to see if WhatsApp is available. If so, click Update. Again, if App Updates is enabled under Automatic Downloads in Settings > App Store , your iPhone may have updated WhatsApp on its own.

More…

Leave a Reply