CVE-2019-11932
HIGHWhatsApp < 2.19.244 - Remote Code Execution via GIF Image Parsing
Title source: llmExploitation Summary
EIP tracks 22 public exploits for CVE-2019-11932. PoCs published by Valerio Brussani, dorkerdevil, awakened1712.
AI-analyzed exploit summary This exploit calculates the address of the system() function and a ROP gadget in libhwui.so to exploit a remote code execution vulnerability in WhatsApp versions prior to 2.19.244. It is designed to be used in conjunction with a malicious GIF file to achieve RCE.
Description
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.
Exploits (22)
This exploit calculates the address of the system() function and a ROP gadget in libhwui.so to exploit a remote code execution vulnerability in WhatsApp versions prior to 2.19.244. It is designed to be used in conjunction with a malicious GIF file to achieve RCE.
This repository contains a functional exploit for CVE-2019-11932, a double-free vulnerability in WhatsApp. The exploit generates a malicious GIF file that, when sent to a victim, triggers a double-free condition leading to remote code execution (RCE) via a crafted payload.
This repository contains a functional exploit for CVE-2019-11932, targeting a heap overflow vulnerability in the GIF library (gif_lib). The exploit includes crafted GIF data to trigger the vulnerability and achieve remote code execution (RCE) via a gadget-based approach.
This repository contains a functional PoC for CVE-2019-11932, a WhatsApp GIF RCE vulnerability. It includes native code to calculate the system() function address and ROP gadget addresses for different devices, which are essential for exploiting the vulnerability.
This repository contains a functional exploit for CVE-2019-11932, a WhatsApp remote code execution vulnerability. The exploit generates a malicious GIF file that, when sent to a victim and opened, triggers a reverse shell connection to an attacker-controlled server.
The repository claims to exploit CVE-2019-11932 but contains no functional exploit code. Instead, it includes a CPA landing page template for monetization and vague references to WhatsApp hacking without technical details.
This repository contains a functional exploit for CVE-2019-11932, targeting a heap-based buffer overflow in the GIF library (egif_lib.c). The exploit leverages crafted GIF data to achieve remote code execution (RCE) via memory corruption and ROP gadgets.
This repository contains a functional exploit for CVE-2019-11932, a WhatsApp vulnerability that allows remote code execution via a maliciously crafted GIF file. The exploit generates a corrupted GIF file that, when sent and viewed in WhatsApp, triggers a heap-based buffer overflow.
This repository contains a functional exploit for CVE-2019-11932, a WhatsApp GIF RCE vulnerability. The exploit generates a malicious GIF file that triggers a heap-based buffer overflow, leading to remote code execution via a reverse shell payload.
This repository contains a functional exploit PoC for CVE-2019-11932, a double-free vulnerability in WhatsApp. The exploit generates a malicious GIF file that, when sent to a victim, triggers a double-free condition leading to remote code execution (RCE) via a reverse shell.
This repository contains a detailed technical analysis of CVE-2019-11932, a double-free vulnerability in WhatsApp's GIF parsing library (libpl_droidsonroids_gif) that leads to remote code execution. The writeup includes root cause analysis, exploit steps, and patch details.
This repository contains a functional exploit for CVE-2019-11932, a WhatsApp remote code execution vulnerability. The exploit generates a malicious GIF file that, when sent to a victim and opened, triggers a buffer overflow leading to arbitrary command execution via a reverse shell.
This repository contains a functional exploit for CVE-2019-11932, targeting a heap-based buffer overflow in the WhatsApp image parsing library. The exploit crafts a malicious GIF file to achieve remote code execution (RCE) by leveraging a gadget and system() function call to execute arbitrary commands.
This repository contains a functional exploit PoC for CVE-2019-11932, a double-free vulnerability in WhatsApp. The exploit generates a malicious GIF file that triggers remote code execution via a crafted payload, leveraging memory corruption to execute arbitrary commands.
The repository contains only a minimal README with a CVE reference and no functional exploit code or technical details. It appears to be a placeholder or stub.
The repository contains only a README.md file with minimal content (just the CVE identifier) and no exploit code or technical details. It appears to be a placeholder or stub.
This repository contains a functional exploit for CVE-2019-11932, a double-free vulnerability in WhatsApp. The exploit generates a malicious GIF file that, when sent to a victim, triggers a double-free condition leading to remote code execution (RCE) via a reverse shell.
This repository contains a functional exploit for CVE-2019-11932, targeting a heap-based buffer overflow in the WhatsApp image parsing library. The exploit crafts a malicious GIF file to achieve remote code execution (RCE) via a reverse shell payload.
The repository contains only a README.md file with a title and no functional exploit code or technical details. It appears to be a placeholder or stub repository.
This repository contains a technical analysis of CVE-2019-11932, a double-free vulnerability in WhatsApp, with a focus on dynamic debugging using GEF-GDB. It explains how the exploit works but does not include functional exploit code.
This repository contains a functional exploit for CVE-2019-11932, targeting a heap overflow vulnerability in the GIF library (gif_lib). The exploit includes crafted GIF data to trigger the vulnerability and achieve remote code execution (RCE) via a JNI-based payload.
This repository contains a functional PoC for CVE-2019-11932, a WhatsApp GIF RCE vulnerability. The native code calculates the system() function and ROP gadget addresses for exploitation, demonstrating the vulnerability's technical mechanics.
References (9)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H