CVE-2025-43450
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
A logic issue was addressed with improved checks. An app may be able to learn information about the current camera view before being granted camera access.
Risk Assessment
A malicious app could violate user privacy by obtaining camera view information without the required permission.
Recommendation
Update devices to iOS 18.7.2 / iPadOS 18.7.2 or iOS 26.1 / iPadOS 26.1.
Other vulnerabilities in iOS and iPadOS
See all- CVE-2025-24200MediumActively exploited
An authorization issue was addressed with improved state management. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
- CVE-2025-31216Low
The issue was addressed with improved checks in iOS 18.5, iPadOS 18.5, and iPadOS 17.7.7. An attacker with physical access to a device may be able to override managed Wi-Fi profiles.
Original NVD description (English source)
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to learn information about the current camera view before being granted camera access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS