CVE-2025-30259
Last modified
CVE-2025-30259 is a low-severity vulnerability rated 3.5/10 on the CVSS scale. The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL.. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL.
Metrics
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-30259?
How severe is CVE-2025-30259?
How do I fix CVE-2025-30259?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-3025Elevation of Privileges in the cleaning feature of Gen Digit…7.3
- CVE-2025-30254An unauthenticated attacker can obtain a serial number of a …6.9
- CVE-2025-30255Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi S…8.3
- CVE-2025-30256A denial of service vulnerability exists in the HTTP Header …7.5
- CVE-2025-30257Unauthenticated attackers can retrieve serial number of smar…6.9
- CVE-2025-30258In GnuPG before 2.5.5, if a user chooses to import a certifi…4.7
- CVE-2025-3026The vulnerability exists in the EJBCA service, version 8.0 E…6.1
- CVE-2025-30260An allocation of resources without limits or throttling vuln…6.5
- CVE-2025-30261An allocation of resources without limits or throttling vuln…6.5
- CVE-2025-30262A NULL pointer dereference vulnerability has been reported t…6.5
- CVE-2025-30263A NULL pointer dereference vulnerability has been reported t…6.5
- CVE-2025-30264A command injection vulnerability has been reported to affec…8.8
Are you affected by CVE-2025-30259?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST