CVE-2025-30428

—

CVSS 3.1

5.4 medium

EPSS

<1%p27

Published

Mar 31, 2025 (Mar 31, 2025)

Modified

Jun 17, 2026

Description

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the Hidden Photos Album may be viewed without authentication.

Vendors: apple
Products: ipados, iphone os
Weakness: CWE-305
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.