Denial of Service Vulnerability in WeChat Android Application through Emoji File Replacement

Denial of Service Vulnerability in WeChat Android Application through Emoji File Replacement

CVE-2019-11419 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause a denial of service (application crash) by replacing an emoji file (under the /sdcard/tencent/MicroMsg directory) with a crafted .wxgf file. The content of the replacement must be derived from the phone's IMEI. The crash occurs upon receiving a message that contains the replaced emoji.

Learn more about our Cis Benchmark Audit For Google Android.