CVE-2019-3568: WhatsApp VOIP Stack Buffer Overflow Vulnerability
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-3568?
CVE-2019-3568 is a buffer overflow vulnerability in WhatsApp VOIP stack that allows remote code execution.
How can the CVE-2019-3568 vulnerability be exploited?
The CVE-2019-3568 vulnerability can be exploited by sending a specially crafted series of RTCP packets to a target phone number in WhatsApp.
Which versions of WhatsApp are affected by CVE-2019-3568?
WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, and WhatsApp Business for iOS prior to v2.19.51 are all affected by CVE-2019-3568.
What is the severity of CVE-2019-3568?
CVE-2019-3568 has a severity rating of 9.8, which is considered critical.
How can I fix CVE-2019-3568?
To fix CVE-2019-3568, users should update their WhatsApp to the latest version available for their respective platforms.