VYPR
← All advisories
High severity7.8NVD Advisory· Published Sep 27, 2019· Updated Jun 17, 2026

CVE-2019-11927

CVE-2019-11927

Description

An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Whatsapp/Whatsapp3 versions
    cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:android:*:*+ 2 more
    • cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:android:*:*range: <2.9.143
    • cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:iphone_os:*:*range: <2.19.100
    • (no CPE)range: <2.19.143 (Android), <2.19.100 (iOS)
  • Facebook/WhatsAppllm-fuzzy
    Range: <2.19.143 (Android), <2.19.100 (iOS)
  • Facebook/WhatsApp for Androidcpe-rescue
    Range: before version 2.19.143
  • Facebook/WhatsApp for iPhonecpe-rescue
    Range: before version 2.19.100

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.