Description (CNA)
Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac v2.25.23.83 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device. We have not seen evidence of exploitation in the wild.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Facebook / WhatsApp Business for iOS | affected 2.25.8.14 before 2.25.23.82 |
| Facebook / WhatsApp for iOS | affected 2.25.8.17 before 2.25.23.73 |
| Facebook / WhatsApp Desktop for Mac | affected 2.25.8.14 before 2.25.23.83 |
CWE
No CWE identifiers supplied.
References
- https://www.facebook.com/security/advisories/cve-2025-55179
- https://www.whatsapp.com/security/advisories/2025/
ADP enrichment
No English description supplied.
No references supplied.