The good news here is that the bugs listed here were apparently patched close to a month ago, even though the latest reports we’ve seen imply that these flaws represent a clear and current danger to WhatsApp users.
As the WhatsApp advisory page points out, these two so-called “zero-day” holes are patched in all flavours of the app, for both Android and iOS, with version numbers 2.22.16.12 or later. According to Apple’s App Store, the current version of WhatsApp for iOS (both Messenger and Business flavours) is already 2.22.19.78, with at five intervening updates released since the first fix that patched the abovementioned bugs, which already dates back a month. On Google Play, WhatsApp is already up to 2.22.19.76 (version don’t always align exactly between different operating systems, but are often close). In other words, if you have set your device to autoupdate, then you ought to have been patched against these WhatsApp threats for about a month already.
To check the apps you have installed, when they last updated, and their version details, open the App Store app on iOS, or Play Store on Android. Tap on your account icon to access the list of apps your installed on your device, including details of when they last updated and the current version number you’ve got.
nakedsecurity.sophos.com
