CVE-2025-24104

—

CVSS 3.1

5.5 medium

EPSS

2%p73

Published

Jan 27, 2025 (Jan 27, 2025)

Modified

Jun 17, 2026

Description

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4. Restoring a maliciously crafted backup file may lead to modification of protected system files.

Vendors: apple
Products: ipados, iphone os
Weakness: CWE-59
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.