VULNERABILITY INTELLIGENCE
CVE-2025-30428
CVSS score5.4 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2025-03-31
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Description
This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the Hidden Photos Album may be viewed without authentication.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-305
Primary references
- product-security@apple.com — Vendor Advisory
- product-security@apple.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108