CVE-2019-11927CWE-190

An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags…

published September 27, 2019

CVSS
—
EPSS
1%
Percentile
60.3
In the wild
Unconfirmed
What it is

An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00932 · 60.3th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2019-09-27T20:14Z
EPSS history
Timeline
  • 27 SEP 20:14Z
    An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags…
    cvelistv5