[therealdrag0]

This sort of thing blows my mind.

Any rough theories on how this sort of thing can happen? How can an app go from parsing metadata to executing foreign code?

[rossjudson]

It's called C. It's incredibly hard to write secure code in it.

[earenndil]

I thought whatsapp was erlang?

[hooch]

I don’t imagine there being much Erlang in the iOS and Android clients.

[ghostpepper]

Is there any C in WhatsApp?

[londons_explore]

Yes - all the media decoders are in C

[ghostpepper]

Cool, that actually does sound like a rather large attack surface for an innocent-looking attachment to wind up executing code