WhatsApp has begun rolling out a fix for an Android loophole that could expose private photos from a locked phone. Security.NL reported the update after the issue was shown to affect the path from an incoming WhatsApp video call to the app’s photo filters and backgrounds menu.

The problem required physical access to the device. A person could answer an incoming WhatsApp video call without entering the phone’s PIN or using biometrics, then attempt to reach the gallery through the call interface.

9to5Google reported that testing found the behavior on some Pixel and OPPO phones. The publication said a Galaxy device in its testing required the lock screen to be opened first, while WhatsApp on iPhone used the native calling interface and did not show the same path.

That difference means the report should not be read as a universal Android or WhatsApp failure. Device software, app versions and security settings can change the result. The bug also did not provide full access to every part of a phone, according to the reporting.

Security.NL said WhatsApp described the issue as an exceptional case that required someone to have the phone in hand. The company also said it was rolling out a fix. That reduces the immediate risk, but users should still install updates from the official app store.

Before the fix was reported, 9to5Google suggested limiting WhatsApp’s photo and video permission as a temporary workaround. Permission menus vary by Android version, so users should check the privacy settings on their own phone rather than follow a menu path that may not match.

Users should also avoid lending an unlocked or unattended phone to someone they do not trust. A screen lock is still useful, but the incident shows why the lock screen and third-party call interfaces must work together correctly.

There is no reported reason to delete WhatsApp or assume that every Android phone is exposed. The responsible response is to update the app, install the latest device security patch and review photo permissions. WhatsApp’s fix and independent testing provide the current basis for that advice.