{"id":"CVE-2025-30259","aliases":["EUVD-2025-6755","GHSA-7cjf-7m5h-q946"],"status":"published","title":"The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can...","description":"The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00261,"percentile":0.1802,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2025-03-19T00:00:00Z","modified":"2026-06-17T09:08:24Z","products":[{"vendor":"meta","product":"whatsapp cloud service"}],"references":[{"url":"https://www.bleepingcomputer.com/news/security/whatsapp-patched-zero-day-flaw-used-in-paragon-spyware-attacks/"},{"url":"https://citizenlab.ca/2025/03/a-first-look-at-paragons-proliferating-spyware-operations/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30259"},{"url":"https://citizenlab.ca/2025/03/a-first-look-at-paragons-proliferating-spyware-operations"},{"url":"https://www.bleepingcomputer.com/news/security/whatsapp-patched-zero-day-flaw-used-in-paragon-spyware-attacks"},{"url":"https://github.com/advisories/GHSA-7cjf-7m5h-q946"}],"sources":{"cve":[{"id":"CVE-2025-30259","description":"The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL.","status":"published","published":"2025-03-19T00:00:00Z","modified":"2025-03-20T20:36:29.389Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low","assessor":"cna"}],"updated_at":"2026-11-02T14:32:35.099955Z"}],"euvd":[{"id":"EUVD-2025-6755","description":"The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL.","status":"published","published":"2025-03-19T00:00:00Z","modified":"2025-03-20T20:36:29Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T20:52:56.450224Z"}],"ghsa":[{"id":"GHSA-7cjf-7m5h-q946","title":"The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can...","description":"The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL.","status":"published","published":"2025-03-20T00:32:39Z","modified":"2025-03-20T00:32:44Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:00:22.529672Z"}],"nvd":[{"id":"CVE-2025-30259","description":"The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL.","status":"published","published":"2025-03-20T00:15:13.78Z","modified":"2026-06-17T09:08:24.91Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"updated_at":"2026-11-02T14:10:54.744127Z"}]}}