Medium · published June 17, 2025
CVSS calls it medium at 4.2. It is confirmed in active exploitation. It sits in the 67.7th percentile for exploit probability.
⚠️ A crafty logic flaw in how iCloud processes photos and videos could lead to unexpected access! One wrong click on a malicious link, and you're rolling the dice on your privacy. 🔒 Think of it like a delivery service accidentally opening a package without checking its contents — if they miss a dangerous item inside, it could cause chaos! That's the risk with this vulnerability. An attacker could exploit this flaw to gain unauthorized access to sensitive information via maliciously crafted media shared through iCloud Links. If targeted, this could lead to severe privacy breaches for individuals, putting their personal data at risk.
Think of it like a delivery service accidentally opening a package without checking its contents — if they miss a dangerous item inside, it could cause chaos! That's the risk with this vulnerability. This vulnerability arises from improper logic checks when processing photos or videos from iCloud Links, potentially allowing an attacker to exploit the flaw to access unintended data.
An attacker could exploit this flaw to gain unauthorized access to sensitive information via maliciously crafted media shared through iCloud Links. If targeted, this could lead to severe privacy breaches for individuals, putting their personal data at risk. Ensure your devices are updated to the latest versions: iOS 15.8.4, iOS 16.7.11, iOS 18.3.1, or macOS Sequoia 15.3.1, among others listed. Regularly monitor your device's software for updates to protect against this and other vulnerabilities. You've got this! Stay vigilant and keep your devices updated — your security hero status is activated! 🦸♂️
| Product | Versions | Fixed in |
|---|---|---|
| apple/ipados | < 15.8.4 | 15.8.4 |
| apple/ipados | ≥ 16.0, < 16.7.11 | 16.7.11 |
| apple/ipados | ≥ 17.0, < 17.7.5 | 17.7.5 |
| apple/ipados | ≥ 18.0, < 18.3.1 | 18.3.1 |
| apple/iphone_os | < 15.8.4 | 15.8.4 |
| apple/iphone_os | ≥ 16.0, ≤ 16.7.11 | — |
| apple/iphone_os | ≥ 17.0, ≤ 18.3.1 | — |
| apple/macos | ≥ 13.0, < 13.7.4 | 13.7.4 |
| apple/macos | ≥ 14.0, < 14.7.4 | 14.7.4 |
| apple/macos | ≥ 15.0, < 15.3.1 | 15.3.1 |
| apple/visionos | < 2.3.1 | 2.3.1 |
| apple/watchos | < 11.3.1 | 11.3.1 |