CVE-2025-13524: Medium severity AWS Wickr vulnerability
Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require the affected user to take a particular action within the application
To mitigate this issue, users should upgrade AWS Wickr, Wickr Gov and Wickr Enterprise desktop version to version 6.62.13.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13524?
CVE-2025-13524 has been assessed as having a moderate severity due to its potential impact on user privacy and security.
How do I fix CVE-2025-13524?
To mitigate CVE-2025-13524, users should upgrade to AWS Wickr version 6.62.13 or later.
Which versions of AWS Wickr are affected by CVE-2025-13524?
CVE-2025-13524 affects versions of AWS Wickr prior to 6.62.13 on Windows, macOS, and Linux.
What type of vulnerability is CVE-2025-13524?
CVE-2025-13524 is classified as an improper resource release vulnerability in the call termination process.
Can CVE-2025-13524 lead to unauthorized access?
Yes, CVE-2025-13524 may allow unauthorized audio access from another user after a call is terminated.