CVE-2019-11933
Critical
Description
A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code or cause a denial of service.
SeverityCritical
CVSS9.8
Exploit probability—
ProductLibpl Droidsonroids Gif
PublishedOct 23, 2019
First seenOct 23, 2019
Weakness typeCWE-119Memory buffer bounds error
How to fix
Update
- libpl_droidsonroids_gif_project libpl_droidsonroids_gif1.2.19 or later
- whatsapp whatsapp2.19.291 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libpl_droidsonroids_gif_project libpl_droidsonroids_gif | v < 1.2.19 | 1.2.19 |
| whatsapp whatsapp | v < 2.19.291 | 2.19.291 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.