Chi Yuan Chang

An application may be able to access user-sensitive data due to insufficient permissions checks.

An issue allows an attacker to potentially use Siri to enable Auto-Answer Calls. This could be exploited on a locked device. The estimated number of potentially affected devices is not specified.

A logic issue was addressed with improved file handling. Photos in the Hidden Photos Album may be viewed without authentication. The issue is related to insufficient authentication procedures, which could allow a remote attacker to gain unauthorized access to protected information.

An issue allowed an attacker to potentially use Siri to enable Auto-Answer Calls. This could be exploited on a locked device.