CVEvulnerability
CVE-2025-30428
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-03-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.4 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
- Weaknesses
- CWE-305
Description
This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the Hidden Photos Album may be viewed without authentication.
Affected configurations
• apple ipados (< 17.7.6)
• apple ipados (>= 18.0 < 18.4)
• apple iphone os (< 18.4)
Related
Weakness · CWE (1)
- CWE-305 Authentication Bypass by Primary Weakness weakness
References
- https://support.apple.com/en-us/122371 Vendor Advisory
- https://support.apple.com/en-us/122372 Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Apr/4 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/5 seclists.org