TLDR Tech / Practical
Technical Analysis of an NSO Group WhatsApp Zero-Click Exploit
WhatsApp and Facebook security engineers analyzed a pre-call remote code execution vulnerability in WhatsApp mobile applications, identified as CVE-2019-3568, involving targeted attacks with zero-click video calls. The vulnerability stems from an unchecked heap buffer overflow in the Real-Time Transport Control Protocol packet buffering logic within native cross-platform VoIP code. The exploit leveraged legacy server features, crafted capability bit masks, and information leaks to bypass address space randomization and achieve arbitrary code execution via overwritten callback function pointers.
Read the full story