Skip to content
Sign in
CVE-2019-3566Not scoredCWE-284

CVE-2019-3566: Facebook WhatsApp for Android vulnerability

Facebook · WhatsApp for Android

Vendor fix available · Affected: Facebook WhatsApp for Android · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.1%probability of exploitation in the next 30 days
65th percentile
050100

Higher than 65% of scored CVEs

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

A bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual who has taken over over a WhatsApp user's account to recover previously sent messages. This behavior requires independent knowledge of metadata for previous messages, which are not available publicly. This issue affects WhatsApp for Android 2.19.52 and 2.19.54 - 2.19.103, as well as WhatsApp Business for Android starting in v2.19.22 until v2.19.38.

Affected products2

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Facebook · WhatsApp for Android2.19.104; 2.19.54; 2.19.52
  • Facebook · WhatsApp Business for Android2.19.38; 2.19.22

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Facebook
Published
May 2019

CoverageNo articles yet

No CyberSIXT article names CVE-2019-3566 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in