VYPR
← All advisories
High severity7.8NVD Advisory· Published Nov 14, 2019· Updated Jun 17, 2026

CVE-2019-11931

CVE-2019-11931

Description

A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Business for Android versions prior to 2.19.104 and Business for iOS versions prior to 2.19.100.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Facebook/WhatsAppllm-fuzzy
    Range: <2.19.274 (Android), <2.19.100 (iOS), <2.25.3 (Enterprise Client), <2.19.104 (Business for Android), <2.19.100 (Business for iOS)
  • Whatsapp/Whatsappllm-fuzzy
    Range: <2.19.274 (Android), <2.19.100 (iOS), <2.25.3 (Enterprise Client), <2.19.104 (Business for Android), <2.19.100 (Business for iOS)
  • Facebook/WhatsApp for Androidcpe-rescue2 versions
    2.19.104+ 1 more
    • (no CPE)range: 2.19.104
    • (no CPE)range: 2.19.274
  • Facebook/WhatsApp Businesscpe-rescue
    Range: 2.19.100
  • Facebook/WhatsApp Enterprise Clientv5
    Range: 2.25.3
  • Facebook/WhatsApp for iPhonecpe-rescue2 versions
    2.19.100+ 1 more
    • (no CPE)range: 2.19.100
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.