CVE-2019-11933: Libpl Droidsonroids Gif Project Libpl Droidsonroids Gif

Critical severity, CVSS 9.8. EPSS: 4.1% chance of exploitation in the next 30 days.

A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to execute arbitrary code or cause a denial of service.

Affected products

• Libpl Droidsonroids Gif Project Libpl Droidsonroids Gif: before 1.2.19 (fixed in 1.2.19)
• WhatsApp WhatsApp: before 2.19.291 (fixed in 2.19.291)

Published 2019-10-23. Last modified 2026-06-17.