A newly identified WhatsApp security vulnerability allows individuals to bypass the lock screen on certain Android devices via an incoming video call, granting direct access to the private photo gallery without requiring a PIN, fingerprint, or facial recognition, according to reports from tech outlets including Futurezone.at and Notebookcheck.com.
How the WhatsApp Lock Screen Bypass Operates
According to SWR3, the flaw does not enable remote access from a distance. Instead, it requires physical access to a locked smartphone that is receiving an incoming WhatsApp video call. Once the call is accepted while the device remains locked in the background, a user can tap the effects icon to open a menu containing filters and backgrounds, as reported by Futurezone.at.
Vulnerability Varies Across Android Models and Operating Systems
Testing by technology publications demonstrates that the flaw impacts Android devices differently depending on the manufacturer’s custom interface and system permissions. Futurezone.at successfully reproduced the bypass on a Sony Xperia 5 running Android 15. Conversely, tests on a Samsung Galaxy Fold 8 running Android 17 with OneUI 9, as well as a Samsung Galaxy S25 Ultra running One UI 8.5, properly blocked the attempt by requiring a PIN or fingerprint before permitting photo access, according to the reports. A Google Pixel 11 Pro XL running Android 17 prevented the incoming video call from being answered in the locked state entirely. Apple iOS devices are completely unaffected due to the system restrictions of CallKit, according to SWR3 and Notebookcheck.com.
Mitigation Steps and Pending Software Patches
Until updates are widely released, device owners can manually block WhatsApp from accessing local media through Android system settings.
Worth a look