CVE-2025-55179
Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac v2.25.23.83 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device. We have not seen evidence of exploitation in the wild.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55179?
CVE-2025-55179 has been rated as a high severity vulnerability due to its potential for allowing arbitrary media processing on user devices.
How do I fix CVE-2025-55179?
To fix CVE-2025-55179, update WhatsApp for iOS to version 2.25.23.73, WhatsApp Business for iOS to version 2.25.23.82, or WhatsApp for Mac to version 2.25.23.83.
What impact does CVE-2025-55179 have on user data?
CVE-2025-55179 could potentially expose user data by permitting media content from arbitrary URLs to be processed without proper validation.
Is CVE-2025-55179 present in WhatsApp for Android?
No, CVE-2025-55179 specifically affects WhatsApp for iOS, WhatsApp Business for iOS, and WhatsApp for Mac, and does not apply to WhatsApp for Android.
How can I check if I am affected by CVE-2025-55179?
You can check if you are affected by CVE-2025-55179 by verifying that your WhatsApp for iOS, WhatsApp Business for iOS, or WhatsApp for Mac is below the specified versions.