CVE-2019-11933

CRITICAL

WhatsApp for Android <2.19.291 - Buffer Overflow

Title source: llm

Description

A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code or cause a denial of service.

Exploits (3)

gitlab WORKING POC

by gavz · poc

https://gitlab.com/gavz/CVE-2019-11933

View Code ZIP pw:eip

nomisec STUB

by KISH84172 · poc

https://github.com/KISH84172/CVE-2019-11933

View Code ZIP pw:eip

nomisec WRITEUP

by NatleoJ · poc

https://github.com/NatleoJ/CVE-2019-11933

View Code ZIP pw:eip

References (1)

[Third Party Advisory] https://www.facebook.com/security/advisories/cve-2019-11933

Scores

CVSS v3 9.8

EPSS 0.0626

EPSS Percentile 91.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119 CWE-787

Status published

Products (2)

libpl_droidsonroids_gif_project/libpl_droidsonroids_gif < 1.2.19

whatsapp/whatsapp < 2.19.291

Published Oct 23, 2019

Tracked Since Feb 18, 2026