CVE-2019-3571 - AskarLabs CVE Database

CVE-2019-3571

Vendor Facebook

Product WhatsApp Desktop

Weakness CWE-116

Published July 16, 2019

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send files to users that would be displayed with a wrong extension.

Key dates

02Disclosure timeline

July 16, 2019 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-3571 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/116.html

Related vulnerabilities

04Related CVE

CVE-2026-44972 GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content CVE-2025-32074 XSSes in Extension:ConfirmAccount CVE-2021-32679 Filenames not escaped by default in controllers using DownloadResponse CVE-2024-5585 Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) CVE-2021-23205

Identifiers

CVE CVE-2019-3571

CWE CWE-116

Affected versions

Vendor Facebook

Product WhatsApp Desktop

Affected 0.3.3793

Vendor Facebook

Product WhatsApp Desktop

Affected ≥ unspecified and < 0.3.3793