vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause a denial of service (application crash) by replacing an emoji file (under the /sdcard/tencent/MicroMsg directory) with a crafted .wxgf file. The content of the replacement must be derived from the phone's IMEI. The crash occurs upon receiving a message that contains the replaced emoji.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-05-14T18:03:36
Updated: 2024-08-04T22:55:40.833Z
Reserved: 2019-04-21T00:00:00
Link: CVE-2019-11419
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-05-14T19:29:00.373
Modified: 2024-11-21T04:21:04.750
Link: CVE-2019-11419
Redhat
No data.