PT-2019-12563

CVE-2019-11927

·

Published

2019-09-27

·

Updated

2020-10-08

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions prior to 2.19.143 WhatsApp for iOS versions prior to 2.19.100
Description An integer overflow in media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images.
Recommendations For WhatsApp for Android versions prior to 2.19.143, update to version 2.19.143 or later. For WhatsApp for iOS versions prior to 2.19.100, update to version 2.19.100 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-190: Integer Overflow or Wraparound
Related identifiers
CVE-2019-11927
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com