Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-11931

A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream meta

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
facebook

Description

A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Business for Android versions prior to 2.19.104 and Business for iOS versions prior to 2.19.100.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Facebook WhatsApp for Android

  • 2.19.274affected
  • unspecified to < 2.19.274affected

Facebook WhatsApp for iOS

  • 2.19.100affected
  • unspecified to < 2.19.100affected

Facebook WhatsApp for Windows Phone

  • unspecified to ≤ 2.18.368affected

Facebook WhatsApp Enterprise Client

  • 2.25.3affected
  • unspecified to < 2.25.3affected

Facebook WhatsApp Business for Android

  • 2.19.104affected
  • unspecified to < 2.19.104affected

Facebook WhatsApp Business for iOS

  • 2.19.100affected
  • unspecified to < 2.19.100affected

References