What is CVE-2025-13524?

CVE-2025-13524 is a medium-severity vulnerability in Aws Wickr, classified under Improper Resource Shutdown or Release. CVSS score: 5.7/10. Published 2025-11-21.

How severe is CVE-2025-13524?

Medium severity. CVSS v3 base score is 5.7 out of 10.

Vulnerability in Aws Wickr

CVE-2025-13524

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require the affected user to take a particular action within the application To mitigate this issue, users should upgrade AWS Wickr, Wickr Gov and Wickr Enterprise desktop version to version 6.62.13.

EPSS: 0.002 (15.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N.

Affected products

Aws Wickr — versions 6.62.13
Aws Wickr Enterprise — versions 6.62.13
Aws Wickr Gov — versions 6.62.13

Weakness classification (CWE)

CWE-404 — Improper Resource Shutdown or Release

References

ff89ba41-3aa1-4d27-914a-91399e9639e5 (vendor-advisory)
ff89ba41-3aa1-4d27-914a-91399e9639e5 (release-notes)

Frequently asked questions

What is CVE-2025-13524?: CVE-2025-13524 is a medium-severity vulnerability in Aws Wickr, classified under Improper Resource Shutdown or Release. CVSS score: 5.7/10. Published 2025-11-21.
How severe is CVE-2025-13524?: Medium severity. CVSS v3 base score is 5.7 out of 10.