CVE-2019-3568 : Security Advisory and Response

A security weakness in the WhatsApp VOIP stack allowed unauthorized remote access by exploiting a specific series of RTCP packets sent to a designated phone number. This problem impacts earlier versions of WhatsApp for Android (before v2.19.134), WhatsApp Business for Android (before v2.19.44), WhatsApp for iOS (before v2.19.51), WhatsApp Business for iOS (before v2.19.51), WhatsApp for Windows Phone (before v2.18.348), and WhatsApp for Tizen (before v2.18.15).

Understanding CVE-2019-3568

This CVE-2019-3568 vulnerability in WhatsApp allowed unauthorized remote access through the exploitation of a security weakness in the VOIP stack.

What is CVE-2019-3568?

CVE-2019-3568 is a buffer overflow vulnerability in the WhatsApp VOIP stack that permitted remote code execution by sending specially crafted RTCP packets to a targeted phone number.

The Impact of CVE-2019-3568

The vulnerability affects various versions of WhatsApp across different platforms, potentially allowing unauthorized remote access to the affected devices.

Technical Details of CVE-2019-3568

The technical details of the CVE-2019-3568 vulnerability are as follows:

Vulnerability Description

The vulnerability is a heap-based buffer overflow (CWE-122) in the WhatsApp VOIP stack, enabling remote code execution through manipulated RTCP packets.

Affected Systems and Versions

WhatsApp for Android prior to v2.19.134
WhatsApp Business for Android prior to v2.19.44
WhatsApp for iOS prior to v2.19.51
WhatsApp Business for iOS prior to v2.19.51
WhatsApp for Windows Phone prior to v2.18.348
WhatsApp for Tizen prior to v2.18.15

Exploitation Mechanism

Unauthorized remote access is achieved by exploiting the vulnerability through a specific series of RTCP packets sent to a designated phone number.

Mitigation and Prevention

To address CVE-2019-3568, consider the following mitigation and prevention strategies:

Immediate Steps to Take

Update WhatsApp to the latest version on all affected devices.
Avoid clicking on suspicious links or downloading files from unknown sources.
Regularly monitor security advisories for any updates related to this vulnerability.

Long-Term Security Practices

Implement network segmentation to limit the impact of potential attacks.
Educate users about safe online practices and the importance of keeping software up to date.

Patching and Updates

Apply security patches provided by WhatsApp promptly to mitigate the vulnerability and enhance system security.