Description
The issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An attacker with physical access may be able to use Siri to access sensitive user data.
Metrics
CVSS 3.1 4.6/10
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| Apple | iOS and iPadOS | >= unspecified, < 17.2 |
References
- http://seclists.org/fulldisclosure/2023/Dec/7Third Party Advisory
- https://support.apple.com/en-us/HT214035Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2023/Dec/7Third Party Advisory
- https://support.apple.com/en-us/HT214035Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214035
Timeline
- Published
- Dec 12, 2023
- Last modified
- Jun 17, 2026
- NVD status
- Modified