A stack-based buffer overflow could be triggered in WhatsApp by...

7.8 CVSS

Vulnerability Description

A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the elementary stream metadata of an MP4 file and could result in a DoS or RCE. This affects Android versions prior to 2.19.274, iOS versions prior to 2.19.100, Enterprise Client versions prior to 2.25.3, Business for Android versions prior to 2.19.104 and Business for iOS versions prior to 2.19.100.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-11931

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.facebook.com/security/advisories/cve-2019-11931

More from Facebook

View All →

CVE-2025-64296

WordPress Facebook for WooCommerce plugin <= 3.5.7 - Broken Access Control to Notice Dismissal vulnerability

Medium 5.3

CVE-2025-55181

Sending an HTTP request/response body with greater than 2^31 bytes...

Medium 5.3

CVE-2025-55179

Incomplete validation of rich response messages in WhatsApp for iOS...

Medium 5.4

CVE-2025-55177

Incomplete authorization of linked device synchronization messages in WhatsApp for...

Medium 5.4

CVE-2025-30403

A heap-buffer-overflow vulnerability is possible in mvfst via a specially...

Unknown 0

Affected Vendor

Facebook

View all reports →

Affected Software

WhatsApp for Android, WhatsApp for iOS, WhatsApp for Windows Phone, WhatsApp Enterprise Client, WhatsApp Business for Android, WhatsApp Business for iOS

Vulnerable Versions:

2.19.274, unspecified, 2.19.100, 2.25.3, 2.19.104