CVE-2025-31229

A logic issue was addressed with improved checks

Critical · published July 29, 2025

CVSS v3.1
9.1
EPSS
1%
Percentile
56.0
In the wild
Unconfirmed
What it is

🚨 A sneaky logic flaw lets VoiceOver audibly spill your passcode — talk about a game of whispers gone wrong! 🔥 Imagine a hotel clerk who accidentally shouts your room number instead of whispering it discreetly. This bug allows VoiceOver to read aloud sensitive information, making it alarmingly easy for anyone nearby to catch it. An attacker could simply listen in as your passcode is read out loud, allowing them to gain unauthorized access to your device. This is not just an inconvenience; it poses an absolute security risk that could expose personal data and accounts to malicious actors.

Put simply

Imagine a hotel clerk who accidentally shouts your room number instead of whispering it discreetly. This bug allows VoiceOver to read aloud sensitive information, making it alarmingly easy for anyone nearby to catch it. This vulnerability arises from a logic issue where VoiceOver improperly handles passcode inputs, allowing them to be exposed audibly rather than kept confidential. The flaw has been addressed in iOS 18.6 and iPadOS 18.6 to prevent this leakage of sensitive information.

What to do

An attacker could simply listen in as your passcode is read out loud, allowing them to gain unauthorized access to your device. This is not just an inconvenience; it poses an absolute security risk that could expose personal data and accounts to malicious actors. Update your devices to iOS 18.6 or iPadOS 18.6 immediately to secure them against this vulnerability. Make it a practice to regularly check for and apply system updates to maintain security integrity. You've got this! With that update, you're one step closer to securing your device! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00796 · 56.0th percentile
Published
2025-07-29T23:29Z
EPSS history
Timeline
  • 29 JUL 23:29Z
    A logic issue was addressed with improved checks
    cvelistv5