CVE-2019-3571

Medium

Description

An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send files to users that would be displayed with a wrong extension.

SeverityMedium
CVSS5.3
Exploit probability—
ProductWhatsapp
PublishedJul 16, 2019
First seenJul 16, 2019
Weakness typeCWE-116CWE-116

How to fix

Update
  • whatsapp whatsapp0.3.3793 or later

Affected products

ProductAffected versionsFixed in
whatsapp whatsappv < 0.3.37930.3.3793

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.