CVE-2025-13524 - CVE House

Back to Database

Status published Medium CVE-2025-13524

Improper resource release in the call termination process in AWS...

6.8 CVSS

Vulnerability Description

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require the affected user to take a particular action within the application To mitigate this issue, users should upgrade AWS Wickr, Wickr Gov and Wickr Enterprise desktop version to version 6.62.13.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-13524

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from AWS

View All →

Local Privilege Escalation Vulnerability in AWS Client VPN Windows Client

Path Traversal in AWS SAM CLI allows file copy to local cache

Path Traversal in AWS SAM CLI allows file copy to build container

Improper timestamp caching during snapshot rollback in tough

Failure to detect delegated target rollback in tough

Affected Vendor

AWS

View all reports →

Affected Software

Wickr, Wickr Gov, Wickr Enterprise

Vulnerable Versions:

6.62.13

Timeline

Official Publish: November 21st, 2025

Last Modified: November 21st, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service

T1498 Network Denial of Service

T1562 Impair Defenses

Defense Evasion

T1190 Exploit Public-Facing Application

T1046 Network Service Discovery