A security vulnerability in WhatsApp that was made public last week could be abused to execute arbitrary code remotely on affected devices.
Tracked as CVE-2019-11931, the issue is a stack-based buffer overflow that can be triggered by sending a specially crafted MP4 file via WhatsApp, Facebook explains in an advisory.
The buffer overflow occurs when the application parses the elementary stream metadata of an MP4 file. An attacker could target the security bug to trigger a denial of service (DoS) or to execute code remotely.
