CVE-2025-13524

State: Published
Severity: 6.8 Medium
Published: Nov 21, 2025
Updated: Nov 21, 2025
Reserved: Nov 21, 2025

Description

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require the affected user to take a particular action within the application

To mitigate this issue, users should upgrade AWS Wickr, Wickr Gov and Wickr Enterprise desktop version to version 6.62.13.

Scores

CVSS	Score	Vector	Source
4.0	6.8 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	AMZN
3.1	5.7 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N	AMZN

Weaknesses

CWE-404 Improper Resource Shutdown or Release

Affected Products

Product	Versions
WickrAWS	6.62.13Not affected
Wickr GovAWS	6.62.13Not affected
Wickr EnterpriseAWS	6.62.13Not affected

References

https://aws.amazon.com/security/security-bulletins/AWS-2025-029/vendor-advisory
https://docs.aws.amazon.com/wickr/latest/enterpriseadminguide/clients-release-notes-6.62.htmlrelease-notes

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.