WhatsApp for iOS vulnerabilities

2 known vulnerabilities in WhatsApp for iOS from Facebook. 1 is rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 5.4 Medium severity

  Meta Platforms WhatsApp Incorrect Authorization Exploited

  CVE-2025-55177Aug 29, 2025FacebookEPSS 13.5%

  Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78 could have allowed an unrelated user to trigger processing of content from an a

• 9.8 Critical severity

  WhatsApp VOIP Stack Buffer Overflow Exploited

  CVE-2019-3568May 14, 2019FacebookEPSS 30.1%

  A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v