← Vulnerability feed

Vulnerability record · CVE-2019-14319 · published 4 September 2019

CVE-2019-14319: Tiktok cleartext transmission vulnerability

Tiktok · Tiktok

The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic.

6.5 CVSS 3.0 Medium EPSS 1.1% · top 36.7% CWE-319 · Cleartext transmission
6.5CVSS 3.0 base score, v2 3.3
1.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
17 Jun 2026Last modified by NVD

Description

The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic.

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://p16.muscdn.com/img/musically-maliva-obj/1626792871331845~c5_100x100.jpeg Not Applicable
http://p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb0950c32~noop.image Not Applicable
https://github.com/MelroyB/CVE-2019-14319/blob/master/CVE%202019-14319%20.pdf Third Party Advisory
https://play.google.com/store/apps/details?id=com.zhiliaoapp.musically&hl=en_US Product
http://p16.muscdn.com/img/musically-maliva-obj/1626792871331845~c5_100x100.jpeg Not Applicable
http://p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb0950c32~noop.image Not Applicable
https://github.com/MelroyB/CVE-2019-14319/blob/master/CVE%202019-14319%20.pdf Third Party Advisory
https://play.google.com/store/apps/details?id=com.zhiliaoapp.musically&hl=en_US Product

Track CVE-2019-14319 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2022-28799Tiktok vulnerabilityThe TikTok application before 23.7.3 for Android allows account takeover. A crafted URL (unvalidated deeplink) can force the com.zhiliaoapp.musically…EPSS 16%

Source: NIST National Vulnerability Database (record CVE-2019-14319), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.