CVE-2019-11931
High
Description
A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Business for Android versions prior to 2.19.104 and Business for iOS versions prior to 2.19.100.
SeverityHigh
CVSS7.8
Exploit probability—
ProductWhatsapp
PublishedNov 14, 2019
First seenNov 14, 2019
Weakness typeCWE-121CWE-121
How to fix
Update
- whatsapp whatsapp2.19.100, 2.19.274 or later
- whatsapp whatsapp_business2.19.100, 2.19.104 or later
- whatsapp whatsapp_enterprise_client2.25.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| whatsapp whatsapp | v ≤ 2.18.368, v < 2.19.100, v < 2.19.274 | 2.19.100, 2.19.274 |
| whatsapp whatsapp_business | v < 2.19.100, v < 2.19.104 | 2.19.100, 2.19.104 |
| whatsapp whatsapp_enterprise_client | v < 2.25.3 | 2.25.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.