← Back to browse · API

CVE-2019-3568

Severity
CRITICAL
CVSS
9.8
EPSS
0.39166
Risk score
77.91
CISA KEV
Yes
PoC
No
Published
2022-04-19
Modified
2022-04-19
First seen
2026-08-07
Aliases
EUVD-2019-13204, GHSA-CMW5-MMG8-R4FR
Products
Facebook:WhatsApp Business for Android 2.19.44, Facebook:WhatsApp Business for Android unspecified <2.19.134, Facebook:WhatsApp Business for iOS 2.19.51, Facebook:WhatsApp Business for iOS unspecified <2.19.51, Facebook:WhatsApp for Android 2.19.134, Facebook:WhatsApp for Android unspecified <2.19.134, Facebook:WhatsApp for Tizen 2.18.15, Facebook:WhatsApp for Tizen unspecified <2.18.15, Facebook:WhatsApp for Windows Phone 2.18.348, Facebook:WhatsApp for Windows Phone unspecified <2.18.348, Facebook:WhatsApp for iOS 2.19.51, Facebook:WhatsApp for iOS unspecified <2.19.51, Meta Platforms:WhatsApp
Sources
euvd EUVD-2019-13204
cisa.gov CVE-2019-3568

Description

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.

References