CVEvulnerability

CVE-2025-55179

5.4 MEDIUM Published 2025-11-18 Modified 2026-10-18 Official page ↗
Status
Analyzed
Published
2025-11-18
Last modified
2026-10-18
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac v2.25.23.83 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device. We have not seen evidence of exploitation in the wild.

Affected configurations

• whatsapp whatsapp (>= 2.25.8.14 < 2.25.23.83) • whatsapp whatsapp (>= 2.25.8.17 < 2.25.23.73) • whatsapp whatsapp business (>= 2.25.8.14 < 2.25.23.82)

References