Security researcher Jose Rodriguez has identified a WhatsApp exploit on certain Android devices that allows unauthorized users to bypass lock screens and access private photo galleries during calls.

Key Points

• The exploit requires physical access to an Android smartphone and involves interacting with Meta AI features during an incoming WhatsApp video call.
• Affected devices include the Oppo K13 and Pixel 6, while models like the Samsung Galaxy S25 Ultra and Razr Fold appear to be immune.
• Apple devices remain unaffected because iOS uses the CallKit framework to route VoIP calls through a secure, native interface.
• Users can mitigate the risk by navigating to app settings and restricting WhatsApp’s access to photos and camera permissions.
• Neither Google nor Android manufacturers have issued an official patch or formal statement regarding the vulnerability at this time.

Why it Matters

This vulnerability highlights a significant security gap in how third-party applications interact with system-level permissions on specific Android configurations. Users should restrict app permissions to protect sensitive data until manufacturers release official software updates to address the flaw.