What’s Vulnerable › Vulnerabilities

CVE-2020-20096

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-03-23 · updated 2026-06-17

Description

Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages.

Affected products

• Facebook WhatsApp for Android: through 2.19.80; through 2.19.222

References

• http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html
• https://github.com/zadewg/RIUS
• http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html
• https://github.com/zadewg/RIUS

Get alerted when CVE-2020-20096 or the next vulnerability affects your stack