awakened1712.github.io personal blog

How a double-free bug in WhatsApp turns to remote code execution

In this blog post, I’m going to share about a double-free vulnerability that I discovered in WhatsApp for Android, and how I turned it into an RCE. I informed this to Facebook. Facebook acknowledged and patched it officially in WhatsApp version 2.19.244. Facebook reserved CVE-2019-11932 for this issue.
Points
416
HN comments
120
Submissions
1
Cited by
0 commenters

Security & Privacy2019

On Hacker News

SubmittedTitle on HNPointsComments
Oct 2, 2019How a double-free bug in WhatsApp turns to remote code execution by wyldfire416120

Related posts from the same era