CVE-2019-11419: Tencent Wechat

Medium severity, CVSS 5.5. EPSS: 4% chance of exploitation in the next 30 days.

vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause a denial of service (application crash) by replacing an emoji file (under the /sdcard/tencent/MicroMsg directory) with a crafted .wxgf file. The content of the replacement must be derived from the phone's IMEI. The crash occurs upon receiving a message that contains the replaced emoji.

Affected products

• Tencent Wechat: up to and including 7.0.3

Published 2019-05-14. Last modified 2026-06-17.