CVE-2019-3568 — WhatsApp VOIP Stack Buffer Overflow Vulnerability

provenance: imported · CVE: CVE-2019-3568

CVE-2019-3568: WhatsApp VOIP Stack Buffer Overflow Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Meta Platforms
Product	WhatsApp
Date added	2022-04-19
Due date	2022-05-10
Ransomware campaign use	Unknown

Description

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-3568

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-3568
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog