CVE-2025-24193

Description

This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos.

Reserved 2025-01-17 | Published 2025-03-31 | Updated 2025-04-01 | Assigner apple

Problem types

An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos

Product status

Any version before 18.4
affected

References

support.apple.com/en-us/122371

cve.org (CVE-2025-24193)

nvd.nist.gov (CVE-2025-24193)

Download JSON