Zero-Click WeChat VoIP Flaw Allowed Remote Code Execution

The Impact of Zero-Click Memory Corruption

Cybersecurity researchers have detailed a critical remote code execution (RCE) vulnerability discovered in WeChat's VoIP handling library. The flaw was zero-click, meaning an attacker could compromise a targeted device simply by initiating a voice call, without requiring the recipient to accept the connection.

Investigations revealed that artificial intelligence-assisted fuzzing techniques played a pivotal role in discovering and engineering the exploit from a subtle memory corruption flaw into a weaponized, cross-platform RCE chain. Tencent resolved the vulnerability following responsible disclosure, avoiding wide-scale exploitation in the wild.

Practical Recommendations for Mitigating Zero-Click Threats

Zero-click vectors represent one of the most perilous classes of cyber threats due to the lack of necessary user interaction. Key mitigation strategies include:

• Promptly Update Mobile and Desktop Clients: Ensure all communication applications across managed fleets are immediately updated to the latest supported releases.
• Enforce Mobile Threat Defense (MTD): Integrate MTD solutions within Enterprise Mobility Management (EMM) platforms to spot signs of memory tampering and payload delivery.
• Network Level Inspection: Monitor outbound network connections from client endpoints for anomalous communications following unexpected VoIP or media signaling.

---

แหล่งที่มา: The Register - Security เผยแพร่ครั้งแรก: Wed, 09 Sep 2026 14:45:00 +0200 บทความต้นฉบับ: อ่านต้นฉบับ