Main Vulnerability Database Vulnerabilities #VU106913

Improper authentication in Apple iOS and iPadOS - CVE-2025-30428

Published: April 3, 2025

Vulnerability identifier: #VU106913

CSH Severity: Low

CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-30428

CWE-ID: CWE-287

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows an attacker to bypass authentication process.

The vulnerability exists due to missing authentication in Photos. An attacker with access to the device can view photos in the Hidden Photos Album.

Apple iOS
iPadOS

Install updates from vendor's website.

Apple iOS - update to 18.4 22E240
iPadOS - addressed in versions 18.4 22E240, 17.7.6