← CVE Radar
CVE-2019-3568WhatsApp VOIP Stack Buffer Overflow Vulnerability
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15.
9.8 CRITICALEPSS 30.07%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 7.5 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:P/I:P/A:P |
CISA required action
⚡ Known exploited · remediation due May 10, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2019-3568
- Status
- Analyzed
- Assigner (CNA)
- Published
- May 14, 2019
- Last modified
- 2026-06-17 02:35 UTC
Affected Products
As published by the CNA in the CVE record.
FacebookWhatsApp for Android2 version ranges
- 2.19.134
- before 2.19.134
FacebookWhatsApp Business for Android2 version ranges
- 2.19.44
- before 2.19.134
FacebookWhatsApp for iOS2 version ranges
- 2.19.51
- before 2.19.51
FacebookWhatsApp Business for iOS2 version ranges
- 2.19.51
- before 2.19.51
FacebookWhatsApp for Windows Phone2 version ranges
- 2.18.348
- before 2.18.348
FacebookWhatsApp for Tizen2 version ranges
- 2.18.15
- before 2.18.15