Description (CNA)
An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Facebook / WhatsApp for Android | affected before version 2.19.143 |
| Facebook / WhatsApp for iOS | affected before version 2.19.100 |
CWE
CWE-190
References
ADP enrichment
No English description supplied.