High severity7.8NVD Advisory· Published Sep 27, 2019· Updated Jun 17, 2026

CVE-2019-11927

Description

An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Facebook/WhatsAppllm-fuzzy
Range: <2.19.143 (Android), <2.19.100 (iOS)
Whatsapp/Whatsappllm-fuzzy
Range: <2.19.143 (Android), <2.19.100 (iOS)
Facebook/WhatsApp for Androidcpe-rescue
Range: before version 2.19.143
Facebook/WhatsApp for iPhonecpe-rescue
Range: before version 2.19.100

Patches

Vulnerability mechanics

References

www.facebook.com/security/advisories/cve-2019-11927nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000