NetSight
IP …
high8.8Public exploit code

CVE-2019-11932

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.

Affected products

VendorProductAffected versions
WhatsappWhatsapp
before 2.19.244
Android-Gif-Drawable ProjectAndroid-Gif-Drawable
before 1.2.18

Weakness classification

CWE-415

References