Adventures in Video Conferencing Part 5: Where Do We Go from Here?
Summary: Google Project Zero's Natalie Silvanovich reported finding 11 bugs across WebRTC, FaceTime and WhatsApp, most through less than 15 minutes of mutation fuzzing RTP. She noted WebRTC lacked documented vulnerability reporting and integrator security guidance, that most video conferencing solutions lack adequate test tools, and that WebRTC's billions of users include Facebook and WhatsApp.
Bottom line: Most of these remote bugs surfaced in under 15 minutes of fuzzing code that runs on billions of devices, and many integrators had branched WebRTC without a plan for applying security fixes.
Read the original at Google Project Zero ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026