{"id":"CVE-2019-11932","aliases":["EUVD-2022-5880","GHSA-x534-j49x-mqvj"],"status":"published","title":"android-gif-drawable Double Free vulnerability","description":"A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.4453,"percentile":0.98774,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-415"],"published":"2019-10-03T21:13:47Z","modified":"2026-10-20T13:56:18Z","exploits":[{"source":"exploitdb","id":"EDB-47515","title":"Whatsapp 2.19.216 - Remote Code Execution","type":"remote","platform":"android","date":"2019-10-16","url":"https://www.exploit-db.com/exploits/47515"},{"source":"pocgithub","id":"0759104103/cd-CVE-2019-11932","title":"0759104103/cd-CVE-2019-11932","date":"2023-03-29","url":"https://github.com/0759104103/cd-CVE-2019-11932"},{"source":"pocgithub","id":"Err0r-ICA/WhatsPayloadRCE","title":"Err0r-ICA/WhatsPayloadRCE","date":"2020-04-22","url":"https://github.com/Err0r-ICA/WhatsPayloadRCE"},{"source":"pocgithub","id":"JasonJerry/WhatsRCE","title":"JasonJerry/WhatsRCE","date":"2019-10-04","url":"https://github.com/JasonJerry/WhatsRCE"},{"source":"pocgithub","id":"SmoZy92/CVE-2019-11932","title":"SmoZy92/CVE-2019-11932","date":"2019-12-15","url":"https://github.com/SmoZy92/CVE-2019-11932"},{"source":"pocgithub","id":"Tabni/https-github.com-awakened1712-CVE-2019-11932","title":"Tabni/https-github.com-awakened1712-CVE-2019-11932","date":"2021-08-17","url":"https://github.com/Tabni/https-github.com-awakened1712-CVE-2019-11932"},{"source":"pocgithub","id":"TulungagungCyberLink/CVE-2019-11932","title":"TulungagungCyberLink/CVE-2019-11932","date":"2019-10-05","url":"https://github.com/TulungagungCyberLink/CVE-2019-11932"},{"source":"pocgithub","id":"awakened1712/CVE-2019-11932","title":"awakened1712/CVE-2019-11932","date":"2019-10-04","url":"https://github.com/awakened1712/CVE-2019-11932"},{"source":"pocgithub","id":"dorkerdevil/CVE-2019-11932","title":"dorkerdevil/CVE-2019-11932","date":"2019-10-03","url":"https://github.com/dorkerdevil/CVE-2019-11932"},{"source":"pocgithub","id":"fastmo/CVE-2019-11932","title":"fastmo/CVE-2019-11932","date":"2019-10-16","url":"https://github.com/fastmo/CVE-2019-11932"},{"source":"pocgithub","id":"infiniteLoopers/CVE-2019-11932","title":"infiniteLoopers/CVE-2019-11932","date":"2019-10-06","url":"https://github.com/infiniteLoopers/CVE-2019-11932"},{"source":"pocgithub","id":"k3vinlusec/WhatsApp-Double-Free-Vulnerability_CVE-2019-11932","title":"k3vinlusec/WhatsApp-Double-Free-Vulnerability_CVE-2019-11932","date":"2021-07-23","url":"https://github.com/k3vinlusec/WhatsApp-Double-Free-Vulnerability_CVE-2019-11932"},{"source":"pocgithub","id":"kal1gh0st/WhatsAppHACK-RCE","title":"kal1gh0st/WhatsAppHACK-RCE","date":"2021-03-19","url":"https://github.com/kal1gh0st/WhatsAppHACK-RCE"},{"source":"pocgithub","id":"mRanonyMousTZ/CVE-2019-11932-whatsApp-exploit","title":"mRanonyMousTZ/CVE-2019-11932-whatsApp-exploit","date":"2019-10-23","url":"https://github.com/mRanonyMousTZ/CVE-2019-11932-whatsApp-exploit"},{"source":"pocgithub","id":"primebeast/CVE-2019-11932","title":"primebeast/CVE-2019-11932","date":"2020-09-12","url":"https://github.com/primebeast/CVE-2019-11932"},{"source":"pocgithub","id":"starling021/CVE-2019-11932-SupportApp","title":"starling021/CVE-2019-11932-SupportApp","date":"2020-08-20","url":"https://github.com/starling021/CVE-2019-11932-SupportApp"},{"source":"pocgithub","id":"valbrux/CVE-2019-11932-SupportApp","title":"valbrux/CVE-2019-11932-SupportApp","date":"2019-10-16","url":"https://github.com/valbrux/CVE-2019-11932-SupportApp"}],"fixes":[{"ecosystem":"Maven","package":"pl.droidsonroids.gif:android-gif-drawable","fixed_in":["1.2.18"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"pl.droidsonroids.gif:android-gif-drawable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18"}]}]},{"source":"osv","ecosystem":"Maven","package":"pl.droidsonroids.gif:android-gif-drawable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18"}]}],"versions":["1.0.10","1.0.11","1.0.12","1.0.6","1.0.7","1.0.8","1.0.9","1.1.0","1.1.1","1.1.10","1.1.11","1.1.12","1.1.13","1.1.14","1.1.15","1.1.16","1.1.17","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7","1.1.8","1.1.9","1.2.0","1.2.1","1.2.10","1.2.11","1.2.12","1.2.13","1.2.14","1.2.15","1.2.16","1.2.17","1.2.2","1.2.3","1.2.4","1.2.5","1.2.6","1.2.7","1.2.8","1.2.9"]}],"products":[{"vendor":"android-gif-drawable_project","product":"android-gif-drawable"},{"vendor":"koral--","product":"android-gif-drawable"},{"vendor":"whatsapp","product":"whatsapp"}],"references":[{"url":"https://www.facebook.com/security/advisories/cve-2019-11932","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://packetstormsecurity.com/files/154867/Whatsapp-2.19.216-Remote-Code-Execution.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://github.com/koral--/android-gif-drawable/pull/673/commits/4944c92761e0a14f04868cbcf4f4e86fd4b7a4a9","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/koral--/android-gif-drawable/pull/673","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://awakened1712.github.io/hacking/hacking-whatsapp-gif-rce/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"http://seclists.org/fulldisclosure/2019/Nov/27","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://gist.github.com/wdormann/874198c1bd29c7dd2157d9fc1d858263","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://packetstormsecurity.com/files/158306/WhatsApp-android-gif-drawable-Double-Free.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://github.com/koral--/android-gif-drawable/commit/cc5b4f8e43463995a84efd594f89a21f906c2d20","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11932","tags":["advisory"]},{"url":"https://awakened1712.github.io/hacking/hacking-whatsapp-gif-rce","tags":["web"]},{"url":"https://github.com/advisories/GHSA-x534-j49x-mqvj"},{"url":"https://github.com/koral--/android-gif-drawable","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2019-11932","description":"A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.","status":"published","published":"2019-10-03T21:13:47Z","modified":"2024-08-04T23:10:29.69Z","cwes":["CWE-415"],"updated_at":"2026-11-02T14:20:26.416173Z"}],"euvd":[{"id":"EUVD-2022-5880","description":"A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.","status":"published","published":"2019-10-03T21:13:47Z","modified":"2024-08-04T23:10:29Z","updated_at":"2026-11-03T02:40:47.406732Z"}],"ghsa":[{"id":"GHSA-x534-j49x-mqvj","title":"android-gif-drawable Double Free vulnerability","description":"A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.","status":"published","published":"2022-05-24T16:57:50Z","modified":"2025-01-13T15:21:41Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:38:27.067633Z"}],"nvd":[{"id":"CVE-2019-11932","description":"A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.","status":"published","published":"2019-10-03T22:15:10.37Z","modified":"2026-06-17T02:13:51.677Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:05:31.019577Z"}],"osv":[{"id":"CVE-2019-11932","description":"A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.","status":"published","published":"2019-10-03T22:15:10.37Z","modified":"2026-10-20T13:56:18.247424054Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.718934Z"},{"id":"GHSA-x534-j49x-mqvj","title":"android-gif-drawable Double Free vulnerability","description":"A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.","status":"published","published":"2022-05-24T16:57:50Z","modified":"2025-01-13T15:57:04.734138Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T15:46:59.484835Z"}]}}