Lucene search

K
nessusThis script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.ANDROID_CVE-2019-18426.NBIN
HistoryMar 08, 2024 - 12:00 a.m.

Android Buffer Overflow in WhatsApp (CVE-2019-3568)

2024-03-0800:00:00
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
32
buffer overflow
whatsapp
remote code execution
rtcp
vulnerability
android
ios
windows phone
tizen
nessus

8.1 High

AI Score

Confidence

Low

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15.

Note that Nessus has not tested for this issue but has instead relied only on the application’s self-reported version number.

Binary data android_cve-2019-18426.nbin
VendorProductVersionCPE
samsunginternetcpe:/a:samsung:internet