CVE-2025-24102

The issue was addressed with improved checks

Critical · published January 27, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
61.1
In the wild
Unconfirmed
What it is

🚨 A sneaky location disclosure vulnerability could let an app track your every move! 🔥 Think of it like a GPS tracker hidden in your favorite coffee mug, giving away your location to anyone who wants to snoop—super convenient for them, not so much for your privacy! ☕️ An attacker could exploit this vulnerability to determine your current location without your knowledge. This could lead to a complete breach of privacy, potentially exposing you to targeted attacks or unwanted surveillance. Protecting your personal space is more critical now than ever!

Put simply

Think of it like a GPS tracker hidden in your favorite coffee mug, giving away your location to anyone who wants to snoop—super convenient for them, not so much for your privacy! ☕️ This vulnerability allows an application to access a user's current location by bypassing intended restrictions. Improved checks that have been implemented in recent updates aim to prevent this kind of unauthorized location access.

What to do

An attacker could exploit this vulnerability to determine your current location without your knowledge. This could lead to a complete breach of privacy, potentially exposing you to targeted attacks or unwanted surveillance. Protecting your personal space is more critical now than ever! To secure your devices, immediately update to iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, or macOS Ventura 13.7.3. Regularly check for software updates and ensure your app permissions are set correctly to limit location access. You've got this! With these updates, you'll be keeping your location under wraps. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00957 · 61.1th percentile
Published
2025-01-27T21:46Z
EPSS history
Timeline
  • 27 JAN 21:46Z
    The issue was addressed with improved checks
    cvelistv5