VULNERABILITY INTELLIGENCE

CVE-2019-3568

CVSS score9.8 CRITICAL
EPSS probability30.08%
CISA KEVKnown exploited vulnerability
Published2019-05-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

WhatsApp VOIP Stack Buffer Overflow Vulnerability

Vendor / product: Meta Platforms / WhatsApp

Description

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15.

Weakness classification

  • CWE-122: Heap-based Buffer Overflow
  • CWE-787: Out-of-bounds Write

Primary references