| Package | Affected versions | Patched versions |
|---|---|---|
≥ 2.25.8.0, ≤ 2.26.15.72≥ 2.25.8.0, ≤ 2.26.7.10 |
Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device, including triggering OS-controlled custom URL scheme handlers. We have not seen evidence of exploitation in the wild.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free