Riskcovery

CVE-2019-11931

State
Published
Severity
Not scored
Published
Nov 14, 2019
Updated
Aug 4, 2024
Reserved
May 13, 2019

Read the record on cve.org

Description

A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Business for Android versions prior to 2.19.104 and Business for iOS versions prior to 2.19.100.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-121 Stack-based Buffer Overflow (CWE-121)

Affected Products

ProductVersions
WhatsApp for AndroidFacebook
  • 2.19.274Affected
  • before 2.19.274Affected
WhatsApp for iOSFacebook
  • 2.19.100Affected
  • before 2.19.100Affected
WhatsApp for Windows PhoneFacebook
  • 2.18.368 and earlierAffected
WhatsApp Enterprise ClientFacebook
  • 2.25.3Affected
  • before 2.25.3Affected
WhatsApp Business for AndroidFacebook
  • 2.19.104Affected
  • before 2.19.104Affected
WhatsApp Business for iOSFacebook
  • 2.19.100Affected
  • before 2.19.100Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.