What is the impact of this vulnerability? I don’t see what an attacker can do if... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		yalogin on Sept 27, 2022 \| parent \| context \| favorite \| on: WhatsApp Remote Code Execution in Video Call What is the impact of this vulnerability? I don’t see what an attacker can do if they successfully exploited this. Since this is in a bundled library does it help me get past the iOS sandbox for example? If so can one steal WhatsApp keys? What is the fallout, does anyone know?

flatiron on Sept 27, 2022 [–]

It runs as whatsapp so if you allowed it access to photos, location, etc you gain that. Very powerful stuff.

GoblinSlayer on Sept 28, 2022 | [–]

And message history.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact