PT-2025-47800 · Amazon Web Services · Wickr Gov+2

Published 2025-11-21 · Updated 2025-11-23 · CVE-2025-13524

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AWS Wickr versions prior to 6.62.13

Description A flaw exists in the call termination process that may allow a call participant to continue receiving audio input from another user after closing their call window. This issue occurs in AWS Wickr on Windows, macOS, and Linux systems under specific conditions requiring a particular user action within the application.

Recommendations Upgrade AWS Wickr, Wickr Gov and Wickr Enterprise desktop versions to version 6.62.13.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2025-13524

Affected Products

Aws Wickr

Wickr Enterprise

Wickr Gov

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-13524 · Security Note
• https://aws.amazon.com/security/security-bulletins/AWS-2025-029 · Vendor Advisory
• https://t.me/cveNotify/143656 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1991990730462535874 · Twitter Post
• https://t.me/CVEtracker/37971 · Telegram Post
• https://docs.aws.amazon.com/wickr/latest/enterpriseadminguide/clients-release-notes-6.62.html · Note
• https://twitter.com/CVEnew/status/1991970376143061465 · Twitter Post
• https://twitter.com/the_c_protocol/status/1992488316655096238 · Twitter Post