A vulnerability in WhatsApp for iOS (prior to v2.25.23.73), WhatsApp Business for iOS (prior to v2.25.23.82), and WhatsApp for Mac (prior to v2.25.23.83) involves incomplete validation of rich response messages. This flaw could allow an attacker to cause a user’s device to process media content from an arbitrary URL. There is no evidence of exploitation in the wild.