Ade Barkah

The issue allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call.

The issue concerns the Passcode Lock implementation, which does not properly restrict photo viewing. This allows physically proximate attackers to view arbitrary stored photos by spoofing a time value.

The issue concerns the Emergency Dialer screen in the Passcode Lock implementation, where it fails to properly limit dialing methods. This allows physically proximate attackers to bypass intended access restrictions. Attackers can make FaceTime calls through Voice Dialing or obtain sensitive contact information by attempting to make a FaceTime call and reading the contact suggestions.