CVE-2019-3571

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send files to users that would be displayed with a wrong extension.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-116 CWE-20

Affected software

Vendor	Product	Versions
Facebook	WhatsApp Desktop	0.3.3793; >= unspecified, < 0.3.3793

References

https://www.facebook.com/security/advisories/cve-2019-3571Third Party Advisory
https://www.facebook.com/security/advisories/cve-2019-3571Third Party Advisory

Timeline

Published: Jul 16, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-35726.5An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the CVE-2019-35735.5In libsixel v1.8.2, there is an infinite loop in the function sixel_decode_raw_impl() in the file fromsixel.c, as demonstrated by sixel2png.CVE-2019-35747.8In libsixel v1.8.2, there is a heap-based buffer over-read in the function load_jpeg() in the file loader.c, as demonstrated by img2sixel.CVE-2019-35757.8Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load.CVE-2019-35769.8inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATH_INFO. The CVE-2019-35779.8An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id[0] parame CVE-2019-35786.1MyBB 1.8.19 has XSS in the resetpassword function.CVE-2019-35795.3MyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the username upon receiving a password-reset reques CVE-2019-35807.5OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file.CVE-2019-35817.5Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of servic CVE-2019-35827.8Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security (ENS) 10.6.1 and earlier allows local users to ga CVE-2019-35846.0Exploitation of Authentication vulnerability in MVision Endpoint in McAfee MVision Endpoint Prior to 1811 Update 1 (18.11.31.62) allows auth