CVE-2025-55179
Last modified
CVE-2025-55179 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac v2.25.23.83 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device. We have not seen evidence of exploitation in the wild.. EPSS estimates a 0.15% chance of exploitation in the next 30 days.
Description
Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac v2.25.23.83 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device. We have not seen evidence of exploitation in the wild.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| >= 2.25.8.14, < 2.25.23.83 | ||
| >= 2.25.8.17, < 2.25.23.73 | ||
| Whatsapp Business | >= 2.25.8.14, < 2.25.23.82 |
References
- https://www.facebook.com/security/advisories/cve-2025-55179Vendor Advisory
- https://www.whatsapp.com/security/advisories/2025/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-55179?
How severe is CVE-2025-55179?
How do I fix CVE-2025-55179?
Are you affected by CVE-2025-55179?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST