CVE-2019-3568: Facebook WhatsApp for Android, грешка в паметта

Описание

Оригинално описание

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15.

Засегнати продукти

• Facebook WhatsApp for Android: 2.19.134; unspecified преди 2.19.134
• Facebook WhatsApp Business for Android: 2.19.44; unspecified преди 2.19.134
• Facebook WhatsApp for iOS: 2.19.51; unspecified преди 2.19.51
• Facebook WhatsApp Business for iOS: 2.19.51; unspecified преди 2.19.51
• Facebook WhatsApp for Windows Phone: 2.18.348; unspecified преди 2.18.348
• Facebook WhatsApp for Tizen: 2.18.15; unspecified преди 2.18.15

Вид слабост

• CWE-122 Препълване на буфера в хийпа

История

Други уязвимости в Facebook WhatsApp for Android

• 4.3CVE-2026-23866
• 5.4CVE-2025-55179
• 5.4CVE-2025-55177
• 5.0CVE-2023-38538
• 5.6CVE-2023-38537

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2019-3568
• https://nvd.nist.gov/vuln/detail/CVE-2019-3568
• https://www.facebook.com/security/advisories/cve-2019-3568
• http://www.securityfocus.com/bid/108329
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-3568