Beware: New Trick to Bypass WhatsApp via Video Call

Jakarta, CNBC Indonesia – Android users need to be wary of a bug in WhatsApp. The bug is reportedly able to open the photo gallery even when the phone is locked. According to Gizbot, the vulnerability can be exploited by someone with physical access to the phone when a WhatsApp video call comes in.

Testing on several devices showed that the Google Pixel 6 Pro and Oppo K13 allowed access to the entire gallery through the lock screen. Meanwhile, the Samsung Galaxy S25 Ultra continued to ask for a PIN or biometric authentication.

Interestingly, both the Oppo K13 and Galaxy S25 Ultra run Android 16. This indicates the difference is likely related to each manufacturer’s interface system and security implementation, not the Android version.

How the Video Call Trick Works

According to Gizbot, this method requires no malware or remote attack. A person simply answers a WhatsApp video call while the phone is locked, opens the effects menu, then selects the Meta AI image option until an Edit Photo button appears. On certain devices, that button can open the gallery without authentication.

This condition could expose private photos, screenshots, scanned documents and other sensitive images.

Gizbot noted that the iPhone does not exhibit similar behaviour because WhatsApp uses Apple’s CallKit framework. When an iPhone is locked, WhatsApp calls appear through the system interface, so WhatsApp’s effects panel cannot be accessed in the same way.

How to Protect Your Photos

Android users can restrict WhatsApp’s photo permissions via Settings → Apps → WhatsApp → Permissions → Photos and videos.

Choose options such as Select photos and videos or Limited access so that WhatsApp does not have full access to the gallery.