CVE-2019-11927

An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:android:*:*
cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:iphone_os:*:*

History

21 Nov 2024, 04:21

Type Values Removed Values Added
References () https://www.facebook.com/security/advisories/cve-2019-11927 - Third Party Advisory () https://www.facebook.com/security/advisories/cve-2019-11927 - Third Party Advisory

Information

Published : 2019-09-27 21:15

Updated : 2024-11-21 04:21


NVD link : CVE-2019-11927

Mitre link : CVE-2019-11927

CVE.ORG link : CVE-2019-11927


JSON object : View

Products Affected

whatsapp

  • whatsapp
CWE
CWE-190

Integer Overflow or Wraparound