Product:
iOS
Summary
The issue was addressed with improved handling of caches. An attacker with physical access to an unlocked device may be able to view an image in the most recently viewed locked note. This vulnerability affects both iOS and iPadOS versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4 | CVE-2025-43203 |
Exploitation
To exploit this vulnerability, an attacker must have physical access to an unlocked device. Once they gain access, they can navigate to the locked notes feature and potentially view images that were recently accessed, compromising the confidentiality of the user’s data.
Affected Products
- iOS 18.7 – Fixed handling of caches to prevent unauthorized image access.
- iPadOS 18.7 – Similar fixes applied as in iOS to enhance security.
- iOS 26 – Updated to address the vulnerability.
- iPadOS 26 – Security improvements made to protect user data.
Mitigation
Users are advised to update their devices to the latest versions of iOS and iPadOS to mitigate this vulnerability. Keeping devices locked and secure can also help prevent unauthorized access.