PT-2025-13964 · Apple · Ipados+1
CVE-2025-30428
·
Published
2025-03-31
·
Updated
2025-04-07
CVSS v3.1
5.4
Medium
| Vector | AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
iOS versions prior to 18.4
iPadOS versions prior to 18.4
iPadOS versions prior to 17.7.6
Description
The issue allows photos in the Hidden Photos Album to be viewed without authentication. This was addressed through improved state management.
Recommendations
For iOS versions prior to 18.4, update to iOS 18.4 to resolve the issue.
For iPadOS versions prior to 18.4, update to iPadOS 18.4 to resolve the issue.
For iPadOS versions prior to 17.7.6, update to iPadOS 17.7.6 to resolve the issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ios
Ipados