CVE-2025-13524CWE-404

CVE-2025-13524

Medium · published November 22, 2025

CVSS v3.1
5.7
EPSS
0%
Percentile
17.1
In the wild
Unconfirmed
What it is

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require the affected user to take a particular action within the application

To mitigate this issue, users should upgrade AWS Wickr, Wickr Gov and Wickr Enterprise desktop version to version 6.62.13.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00263 · 17.1th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2025-11-22T01:15Z
References (2)
https://aws.amazon.com/security/security-bulletins/AWS-2025-029/ · ff89ba41-3aa1-4d27-914a-91399e9639e5https://docs.aws.amazon.com/wickr/latest/enterpriseadminguide/clients-release-notes-6.62.html · ff89ba41-3aa1-4d27-914a-91399e9639e5
EPSS history
Timeline
  • 21 NOV 20:03Z
    Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to…
    cvelistv5