CVE-2025-30401

Published Apr 5, 2025

Last updated 2 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-30401 is a spoofing vulnerability that affects WhatsApp for Windows versions prior to 2.2450.6. The vulnerability lies in how WhatsApp handles file attachments. The application displays attachments according to their MIME type but selects the file opening handler based on the attachment's filename extension. This discrepancy could allow attackers to craft malicious files that appear harmless but, when manually opened by the user, could execute arbitrary code. A maliciously crafted attachment with a misleading filename and MIME type could trick the user into opening a file that contains arbitrary code.

Description: A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type but selected the file opening handler based on the attachment’s filename extension. A maliciously crafted mismatch could have caused the recipient to inadvertently execute arbitrary code rather than view the attachment when manually opening the attachment inside WhatsApp. We have not seen evidence of exploitation in the wild.
Source: cve-assign@fb.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Secondary
Base score: 6.7
Impact score: 5.5
Exploitability score: 1.2
Vector string: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L
Severity: MEDIUM

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 16

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:windows:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2A3F57F6-8A7D-4EF5-9473-A36DF09278D0",
            "versionEndExcluding": "2.2450.6"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.