CVE-2025-13524

Severity: medium (CVSS 5.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-11-21 · updated 2026-10-18
Weakness: CWE-404

Description

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require the affected user to take a particular action within the application To mitigate this issue, users should upgrade AWS Wickr, Wickr Gov and Wickr Enterprise desktop version to version 6.62.13.

References

https://aws.amazon.com/security/security-bulletins/AWS-2025-029/
https://docs.aws.amazon.com/wickr/latest/enterpriseadminguide/clients-release-notes-6.62.html

Get alerted when CVE-2025-13524 or the next vulnerability affects your stack