CVE-2025-30259
Low
Description
The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL.
SeverityLow
CVSS3.5
Exploit probability—
Product
WhatsApp cloud service
PublishedMar 20, 2025
First seenMar 20, 2025
How to fix
Update
- Meta WhatsApp cloud servicelate 2024 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Meta WhatsApp cloud service | v < late 2024 | late 2024 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.