Vulnerability · NVD
CVE-2025-55179
CVE-2025-55179, medium severity (CVSS 5.4): 1 tracked app concerned, all fixed or indeterminable on their current version.
- Severity (CVSS)
- 5.4
- Exploitation
- 0.2 %
- Tracked apps
- 1
- Still exposed
- 0
NVD scale
EPSS, predicted over 30 days
Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac v2.25.23.83 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device. We have not seen evidence of exploitation in the wild.
Show raw CVSS vector
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
Vulnerable CPE configurations (2)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
|
whatsapp iOS
|
iOS | ≥2.25.8.17 <2.25.23.73 | cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:iphone_os:*:* | |
|
whatsapp_business iOS
|
iOS | ≥2.25.8.14 <2.25.23.82 | cpe:2.3:a:whatsapp:whatsapp_business:*:*:*:*:*:iphone_os:*:* |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.