Vulnérabilité · NVD
CVE-2019-11931
HIGH 7.8
EN A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Business for Android versions prior to 2.19.104 and Business for iOS versions prior to 2.19.100.
Vecteur d'attaque : Local
Aucun privilège requis
Voir le vecteur CVSS brut
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
1.21%
au-dessus de la médiane
percentile 65.7%
Apps suivies liées à cette CVE
Pour chaque app : la plage affectée, la version qui corrige, et où en est l'app suivie aujourd'hui.
Configurations CPE vulnérables (4)
| Vendor | Produit | Plateforme | Versions | CPE 2.3 URI |
|---|---|---|---|---|
|
whatsapp iOS
|
iOS | <2.19.100 | cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:iphone_os:*:* | |
|
whatsapp Android
|
Android | <2.19.274 | cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:android:*:* | |
|
whatsapp_business iOS
|
iOS | <2.19.100 | cpe:2.3:a:whatsapp:whatsapp_business:*:*:*:*:*:iphone_os:*:* | |
|
whatsapp_business Android
|
Android | <2.19.104 | cpe:2.3:a:whatsapp:whatsapp_business:*:*:*:*:*:android:*:* |