CVE-2025-30259
The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to mess…
Published: 2025-03-19 · CVSS: 3.5 · CVSS 3.1
The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7