PoC Index

CVE-2025-24104

MEDIUM 5.5EPSS 1.5%

This issue was addressed with improved handling of symlinks. This issue is fixed in iPadOS 17.7.4, iOS 18.3 and iPadOS 18.3. Restoring a maliciously crafted backup file may lead to modification of protected system files.

CVSS v3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
1.53% chance of exploitation in the next 30 days, 73th percentile
Published
2025-01-27
Updated
2026-04-02

Proof-of-concept exploits (2)

References

Related