Product:
iOS
Summary
An issue with app access to camera metadata was addressed with improved logic. This issue allows an app to potentially capture a user’s screen. The problem has been fixed in the latest versions of iOS and iPadOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2026-28957 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious app that can access camera metadata. Once installed on a user’s device, the app could leverage this access to capture sensitive information displayed on the user’s screen without their consent.
Affected Products
- iOS 18.7.9 – Fixed the issue with improved logic regarding camera metadata access.
- iPadOS 18.7.9 – Addressed the vulnerability in the same manner as iOS.
- iOS 26.5 – Includes the fix for the camera metadata access issue.
- iPadOS 26.5 – Also resolves the vulnerability present in earlier versions.
- visionOS 26.5 – The issue has been addressed in this version as well.
Mitigation
To mitigate this vulnerability, users should ensure their devices are updated to the latest versions of iOS or iPadOS. Regularly updating software can help protect against known vulnerabilities and improve overall device security.