CVE-2025-24104

This issue was addressed with improved handling of symlinks

Medium · published January 27, 2025

CVSS v3.1
5.5
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4. Restoring a maliciously crafted backup file may lead to modification of protected system files.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01514 · 74.3th percentile
Published
2025-01-27T21:45Z
EPSS history
Timeline
  • 27 JAN 21:45Z
    This issue was addressed with improved handling of symlinks
    cvelistv5