CVE-2019-11931CWE-121

A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user

published November 14, 2019

CVSS
—
EPSS
1%
Percentile
68.3
In the wild
Unconfirmed
What it is

A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Business for Android versions prior to 2.19.104 and Business for iOS versions prior to 2.19.100.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01212 · 68.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2019-11-14T22:55Z
EPSS history
Timeline
  • 14 NOV 22:55Z
    A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user
    cvelistv5