CVEvulnerability
CVE-2025-24221
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2025-03-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-863
Description
This issue was addressed with improved data access restriction. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, visionOS 2.4. Sensitive keychain data may be accessible from an iOS backup.
Affected configurations
• apple ipados (< 17.7.6)
• apple ipados (>= 18.0 < 18.4)
• apple iphone os (< 18.4)
• apple visionos (< 2.4)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://support.apple.com/en-us/122371 Vendor Advisory
- https://support.apple.com/en-us/122372 Vendor Advisory
- https://support.apple.com/en-us/122378 Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Apr/12 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/4 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/5 seclists.org