Main Vulnerability Database Vulnerabilities #VU106914

#VU106914 Improper authentication in Apple iOS and iPadOS - CVE-2025-30469

Published: April 3, 2025

Vulnerability identifier: #VU106914

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2025-30469

CWE-ID: CWE-287

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Apple iOS
iPadOS

Software vendor:
Apple Inc.

Description

The vulnerability allows an attacker to bypass authentication process.

The vulnerability exists due to missing authentication in Photos. An attacker with physical access to device can access photos from the lock screen.

Install updates from vendor's website.