CVE-2025-24104

No fix known EPSS 2%CVSS 5.5

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4. Restoring a maliciously crafted backup file may lead to modification of protected system files.

Published 2025-01-27 · CVE record · OSV

Products: Apple iOS and iPadOS, apple ipados