PT-2019-12568 · Whatsapp+1 · Whatsapp For Android+1

Os97673 · Published 2019-10-03 · Updated 2025-07-07 · CVE-2019-11932

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions android-gif-drawable library versions prior to 1.2.18 WhatsApp for Android versions prior to 2.19.244

Description A double free vulnerability in the DDGifSlurp function allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image. This issue was reportedly used in a real-world attack, where a video was delivered through an encrypted downloader hosted on WhatsApp's media server, potentially allowing attackers to gain access to a device. The video itself was not malicious, but the exploit was embedded in the file, making it slightly larger than the video. The estimated number of potentially affected devices is not specified, but many Android applications that use the android-gif-drawable library are vulnerable.

Recommendations For android-gif-drawable library versions prior to 1.2.18, update to version 1.2.18 or later to resolve the issue. For WhatsApp for Android versions prior to 2.19.244, update to version 2.19.244 or later to resolve the issue. As a temporary workaround, consider disabling the use of GIF images in affected applications until a patch is available. Restrict access to the DDGifSlurp function to minimize the risk of exploitation.

Exploit

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2019-11932

GHSA-X534-J49X-MQVJ

Affected Products

Whatsapp For Android

Android-Gif-Drawable

References · 34

• 🔥 https://github.com/dorkerdevil/CVE-2019-11932 · Exploit
• 🔥 https://github.com/awakened1712/CVE-2019-11932 · Exploit
• 🔥 https://github.com/KeepWannabe/WhatsRCE · Exploit
• 🔥 https://github.com/valbrux/CVE-2019-11932-SupportApp · Exploit
• 🔥 https://github.com/Err0r-ICA/WhatsPayloadRCE · Exploit
• 🔥 https://github.com/JasonJerry/WhatsRCE · Exploit
• 🔥 https://github.com/kal1gh0st/WhatsAppHACK-RCE · Exploit
• 🔥 https://github.com/mRanonyMousTZ/CVE-2019-11932-whatsApp-exploit · Exploit
• 🔥 https://github.com/fastmo/CVE-2019-11932 · Exploit
• 🔥 https://github.com/infiniteLoopers/CVE-2019-11932 · Exploit
• 🔥 https://github.com/TulungagungCyberLink/CVE-2019-11932 · Exploit
• 🔥 https://github.com/SmoZy92/CVE-2019-11932 · Exploit
• 🔥 https://exploit-db.com/exploits/47515 · Exploit
• 🔥 https://awakened1712.github.io/hacking/hacking-whatsapp-gif-rce · Exploit
• https://github.com/koral--/android-gif-drawable/commit/cc5b4f8e43463995a84efd594f89a21f906c2d20 · Patch