WhatsApp Flaw Exposes Photos
A privacy flaw in WhatsApp's 'create with AI' feature allows anyone to view photos on certain Android phones without unlocking them, affecting devices from OPPO and vivo
A WhatsApp privacy flaw can allow anyone to view photos on an Android phone without unlocking it, by exploiting the 'create with AI' feature during a video call. This flaw has been reported to Meta and Google.
The issue lies in WhatsApp's 'create with AI' feature, which bypasses lock screen restrictions. When a user receives a WhatsApp video call on their locked Android phone, they can answer it without unlocking the phone. Once the call connects, the user can tap the effects icon to apply different filters and backgrounds to their video call. By selecting the 'Backgrounds' option and then tapping the icon to create a background with Meta AI, WhatsApp lets the user create a new image or edit an existing photo. Tapping the option to edit an existing photo opens the gallery immediately without unlocking the phone.
The flaw requires physical access to the device to exploit and access the gallery. It affects devices from OPPO and vivo, but not Samsung phones. The issue is due to how custom Android builds handle lock screens and features accessible without unlocking the phone.
The flaw was shared by Jose Rodriguez on X, explaining how it works and showing it in action. This discovery highlights the importance of ensuring that lock screen restrictions are properly enforced to protect user privacy.
## Why it matters This privacy flaw is significant because it allows anyone with physical access to the device to view photos without unlocking the phone. This could have serious consequences for users who store sensitive or personal photos on their devices. The fact that the flaw has been reported to Meta and Google suggests that the companies are aware of the issue and may be working to resolve it.
The impact of this flaw is limited to devices from certain manufacturers, but it still poses a risk to users who rely on lock screen restrictions to protect their privacy. As a result, users should be cautious when receiving WhatsApp video calls on their locked Android phones and should avoid using the 'create with AI' feature until the issue is resolved.
