Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerability · NVD

CVE-2019-11927

CVE-2019-11927, high severity (CVSS 7.8): 2 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS)
7.8

NVD scale

Exploitation
0.9 %

EPSS, predicted over 30 days

Tracked apps
2
Still exposed
0

An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.

Attack vector : Local No privileges required
Show raw CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS 0.93% above median percentile 59.0%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

  • WhatsApp Android com.whatsapp
    Affected <2.9.143 Fixed in 2.9.143 Latest tracked 2.26.35.75 patched
  • WhatsApp iOS ios:net.whatsapp.WhatsApp
    Affected <2.19.100 Fixed in 2.19.100 Latest tracked 26.37.76 patched
Vulnerable CPE configurations (2)
Vendor Product Versions
whatsapp whatsapp
Android
 <2.9.143
whatsapp whatsapp
iOS
 <2.19.100
View on NVD ↗

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM