CVE 5.4 MEDIUM

CVE-2025-55179_CVE-2025-55179

5.4 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C

Description

Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac v2.25.23.83 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device. We have not seen evidence of exploitation in the wild.

Basic Information

ID CVE-2025-55179
Source Meta
Published Nov 18, 2025 at 13:56
Modified Nov 18, 2025 at 14:25

Affected Product

Vendor Facebook
Product WhatsApp Business for iOS
Version 2.25.8.14
Affected Versions Facebook WhatsApp Business for iOS 2.25.8.14
Facebook WhatsApp for iOS 2.25.8.17
Facebook WhatsApp Desktop for Mac 2.25.8.14

References

πŸ’­ Join the Security Discussion

πŸ”’ Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.