CVE-2025-24095

Опубликовано: 31 мар. 2025

Источник: nvd

CVSS3: 7.6

EPSS Низкий

Описание

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4. An app may be able to bypass Privacy preferences.

Ссылки

https://support.apple.com/en-us/122371
Vendor Advisory
https://support.apple.com/en-us/122378
Vendor Advisory
http://seclists.org/fulldisclosure/2025/Apr/12
http://seclists.org/fulldisclosure/2025/Apr/4

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 18.4 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 18.4 (исключая)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Версия до 2.4 (исключая)

EPSS

Процентиль: 46%

0.00614

Низкий

7.6 High

CVSS3

Дефекты

CWE-288

Связанные уязвимости

GHSA-2h82-w6j2-mfx6

CVSS3: 7.6

github

больше 1 года назад

This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass Privacy preferences.

BDU:2025-05530

CVSS3: 3.3

fstec