5.4
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C
Description
Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac v2.25.23.83 could have allowed a user to trigger processing of media content from an arbitrary URL on another userβs device. We have not seen evidence of exploitation in the wild.
Basic Information
ID
CVE-2025-55179
Source
Meta
Published
Nov 18, 2025 at 13:56
Modified
Nov 18, 2025 at 14:25
Affected Product
Vendor
Facebook
Product
WhatsApp Business for iOS
Version
2.25.8.14
Affected Versions
Facebook WhatsApp Business for iOS 2.25.8.14
Facebook WhatsApp for iOS 2.25.8.17
Facebook WhatsApp Desktop for Mac 2.25.8.14
Facebook WhatsApp for iOS 2.25.8.17
Facebook WhatsApp Desktop for Mac 2.25.8.14