[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 16 sources · 3 days · First seen · Last updated

WhatsApp Android security vulnerability

Overview

A security vulnerability has been identified in WhatsApp for Android that allows unauthorized access to a device’s photo gallery while the phone remains locked. The flaw is linked to the video call interface; when a call is answered from the lock screen, a user can navigate to the effects or backgrounds menu and use Meta AI functions to trigger the local photo gallery, bypassing the need for a PIN, password, or biometric authentication.

The vulnerability affects various manufacturers, including Google Pixel and OPPO, but does not appear to impact Samsung Galaxy devices, which maintain security prompts. iOS users are unaffected due to native system protocols.

Security researcher Jose Rodriguez identified the flaw, noting that while an attacker cannot send or open specific files through this view, they can see thumbnails of private photos, which could be photographed by an external camera. Meta has reportedly released a patch to address the issue, and users are advised to update their WhatsApp application immediately.

Entities

Google · José Rodríguez · Oppo · Android · WhatsApp

Timeline

  1. 7 days ago

    [TECHNOLOGY] 4 sources
    WhatsApp security flaw allows access to private photos on locked Android devices

    A WhatsApp security flaw on certain Android devices allows attackers with physical access to view private photo thumbnails via video call menus, even if the phone is locked. A patch has been released.

  2. 9 days ago

    [TECHNOLOGY] 12 sources
    WhatsApp security flaw allows Android photo access while locked

    A WhatsApp security flaw on certain Android devices allows physical access to private photo galleries via the video call interface without unlocking the phone. Samsung devices remain protected.

Sources

ad-hoc-news.de · androidsis.com · appgamers.de · colombia.com · cyberinsider.com · dotekomanie.cz · geekzilla.tech · harianjogja.com · it-boltwise.de · itopnews.de · netzwelt.de · nokiamob.net · srpskainfo.com · stadt-bremerhaven.de · tecnobreak.com · teltarif.de

This summary has been updated 1 time: see revision history