PT-2019-12563 · Facebook · Whatsapp For Android+1

Published 2019-09-27 · Updated 2020-10-08 · CVE-2019-11927

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions prior to 2.19.143 WhatsApp for iOS versions prior to 2.19.100

Description An integer overflow in media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images.

Recommendations For WhatsApp for Android versions prior to 2.19.143, update to version 2.19.143 or later. For WhatsApp for iOS versions prior to 2.19.100, update to version 2.19.100 or later.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2019-11927

Affected Products

Whatsapp For Android

Whatsapp For Ios

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-11927 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11927 · Vendor Advisory
• https://facebook.com/security/advisories/cve-2019-11927 · Note