CVE-2025-30259
The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30259?
CVE-2025-30259 is classified as a high severity vulnerability due to its potential for allowing remote access to messaging applications.
How does CVE-2025-30259 exploit messaging applications?
CVE-2025-30259 exploits crafted PDF content that bypasses sandbox protections, enabling unauthorized access to messaging apps.
What is the impact of CVE-2025-30259 on user privacy?
CVE-2025-30259 could compromise user privacy by allowing third parties to access private messages and data.
How do I mitigate the risks associated with CVE-2025-30259?
To mitigate CVE-2025-30259, users should update their WhatsApp Cloud Service to the latest version released after late 2024.
Are there any known exploits related to CVE-2025-30259?
Yes, CVE-2025-30259 has been actively exploited in the wild, particularly for installing Android malware.