Firetruck

CVE-2019-3568

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
WhatsApp Business for AndroidFacebook / WhatsApp Business for Android2.19.44affected
WhatsApp Business for AndroidFacebook / WhatsApp Business for Android>= unspecified, < 2.19.134affected
WhatsApp Business for iOSFacebook / WhatsApp Business for iOS2.19.51affected
WhatsApp Business for iOSFacebook / WhatsApp Business for iOS>= unspecified, < 2.19.51affected
WhatsApp for AndroidFacebook / WhatsApp for Android2.19.134affected
WhatsApp for AndroidFacebook / WhatsApp for Android>= unspecified, < 2.19.134affected
WhatsApp for iOSFacebook / WhatsApp for iOS2.19.51affected
WhatsApp for iOSFacebook / WhatsApp for iOS>= unspecified, < 2.19.51affected
WhatsApp for TizenFacebook / WhatsApp for Tizen2.18.15affected
WhatsApp for TizenFacebook / WhatsApp for Tizen>= unspecified, < 2.18.15affected
WhatsApp for Windows PhoneFacebook / WhatsApp for Windows Phone2.18.348affected
WhatsApp for Windows PhoneFacebook / WhatsApp for Windows Phone>= unspecified, < 2.18.348affected