A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code or cause a denial of service.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.04119·Published 2019-10-23·Fixed in 2.19.291CWE-119