CVE-2019-11927

CVE-2019-11927

Vendor Facebook
Product WhatsApp for Android
Weakness CWE-190
Published September 27, 2019
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.

Key dates

02Disclosure timeline

September 27, 2019 CVE published
August 4, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-37976 Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability CVE-2022-2285 Integer Overflow or Wraparound in vim/vim CVE-2026-32849 NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c CVE-2022-0968 The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in microweber/microweber CVE-2025-23324