CVE-2025-30469

LowCVSS 2.4/10Last modified Jun 17, 2026

Description

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may be able to access photos from the lock screen.

Metrics

CVSS 3.1 2.4/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-863

Affected software

Vendor	Product	Versions
Apple	iOS and iPadOS	< 18.4

References

https://support.apple.com/en-us/122371Release Notes, Vendor Advisory
http://seclists.org/fulldisclosure/2025/Apr/4

Timeline

Published: Mar 31, 2025
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-30476.5When running the AWS Serverless Application Model Command Line Interface (SAM CLI) build process with Docker and symlinks are included in th CVE-2025-304705.5A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 1 CVE-2025-304717.5A validation issue was addressed with improved logic. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, ma CVE-2025-304729.8Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_e CVE-2025-304738.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow Common SQL Provider. W CVE-2025-304745.0Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Commons VFS. The FtpFileObject class can throw an except CVE-2025-304759.8Dell PowerScale InsightIQ, versions 5.0 through 5.2, contains an improper privilege management vulnerability. An unauthenticated attacker wi CVE-2025-304767.5Dell PowerScale InsightIQ, version 5.2, contains an uncontrolled resource consumption vulnerability. An unauthenticated attacker with remote CVE-2025-304774.9Dell PowerScale OneFS, versions prior to 9.11.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. A high privile CVE-2025-304797.2Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain CVE-2025-30486.5After completing a build with AWS Serverless Application Model Command Line Interface (SAM CLI) which include symlinks, the content of those CVE-2025-304806.5Dell PowerProtect Data Manager, versions prior to 19.19, contain(s) an Improper Input Validation vulnerability in PowerProtect Data Manager.