CoreCVE
Back

HIGH

An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images

Published Sep 27, 2019

Description

An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner facebook
Published Sep 27, 2019
Updated Aug 4, 2024
Reserved May 13, 2019
Link CVE-2019-11927

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2019-11927

Red Hat

No data

ENISA EUVD

Assigner facebook
Published Sep 27, 2019
Updated Aug 4, 2024
Link EUVD-2019-3585

GitHub

No data