CVE-2025-13524
Medium
Description
Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require the affected user to take a particular action within the application To mitigate this issue, users should upgrade AWS Wickr, Wickr Gov and Wickr Enterprise desktop version to version 6.62.13.
SeverityMedium
CVSS5.7
Exploit probability—
ProductWickr
PublishedNov 21, 2025
First seenNov 21, 2025
Weakness typeCWE-404CWE-404
How to fix
Update
- AWS Wickr6.62.13 or later
- AWS Wickr Gov6.62.13 or later
- AWS Wickr Enterprise6.62.13 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| AWS Wickr | No range specified | 6.62.13 |
| AWS Wickr Gov | No range specified | 6.62.13 |
| AWS Wickr Enterprise | No range specified | 6.62.13 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.