Whatsapp CVE-2019-11933

CRITICAL

Buffer Overflow (CWE-119)

2019-10-23 cve-assign@fb.com

RCE Buffer Overflow Denial Of Service Google Whatsapp Libpl Droidsonroids Gif

9.8

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Oct 23, 2019 - 16:15 nvd

CRITICAL 9.8

DescriptionNVD

A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code or cause a denial of service.

AnalysisAI

A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code or cause a denial. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code or cause a denial of service. Affected products include: Libpl Droidsonroids Gif Project Libpl Droidsonroids Gif, Whatsapp. Version information: before 1.2.19.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

More in Whatsapp

View all

CVE-2022-36934 CRITICAL Act Now POC

An integer overflow in WhatsApp could result in remote code execution in an established video call. Rated critical sever

CVE-2019-11932 HIGH This Week POC

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version

CVE-2022-27492 HIGH This Week POC

An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file. Rated high

CVE-2018-6344 HIGH This Week POC

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. Rated high

CVE-2020-1889 CRITICAL Act Now

A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in

CVE-2021-24041 CRITICAL Act Now

A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android

CVE-2021-24026 CRITICAL Act Now

A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, W

CVE-2020-1909 CRITICAL Act Now

A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.2

CVE-2020-1907 CRITICAL Act Now

A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, Wha

CVE-2020-1891 CRITICAL Act Now

A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android

CVE-2019-3568 CRITICAL Act Now

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTC

CVE-2021-24035 CRITICAL Act Now

A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for

Same weakness CWE-119 – Buffer Overflow

View all

CVE-2020-0796 CRITICAL POC

CVE-2017-11882 HIGH POC

CVE-2014-6332 HIGH POC

CVE-2015-2426 HIGH POC

CVE-2013-3918 HIGH POC

CVE-2023-4966 HIGH POC

CVE-2017-11774 HIGH POC

CVE-2013-3660 HIGH POC

Same technique RCE

View all

CVE-2021-44228 CRITICAL POC

CVE-2017-7269 CRITICAL POC

CVE-2022-47966 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2023-3519 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

Share

CVE-2019-11933 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy