CVE-2025-24193
CVSS 3.1 Score 2.4 of 10 (low)
Details
Published Mar 31, 2025
Updated: Apr 7, 2025
CWE ID 284
Summary
CVE-2025-24193 is a vulnerability affecting iOS and iPadOS. It allows an attacker with physical access to an unlocked device through a USB-C connection to gain unauthorized access to photos. This issue has been resolved in iOS 18.4 and iPadOS 18.4 with improved authentication measures. This vulnerability poses a significant risk to user privacy, emphasizing the importance of securing devices with strong authentication methods.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- iOS
- iPadOS
- Apple (iPhone OS)
Affected Vendors
- Apple