CVE-2025-30259

Published: 2025-03-20T00:15Z

Last Modified: 2025-03-20T00:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt