PT-2025-18939 · Apple · Ios+2

Duy Trần + 3 · Publicado 2025-05-03 · Atualizado 2026-03-25 · CVE-2025-31207

Positive Technologies (AI Summary)

CVSS v3.1

7.7

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.5 iPadOS versions prior to 18.5

Description A logic issue was identified and addressed through improved checks within the FrontBoard component. This issue allows an application to potentially enumerate a user's installed applications. Reports indicate that this issue has been exploited by some App Store applications to detect the presence of TrollStore on a device.

Recommendations Update to iOS version 18.5 or later. Update to iPadOS version 18.5 or later.

Correção

SQL injection

Information Disclosure

Enumeração de Fraquezas

CWE-89

CWE-200

Identificadores relacionados

BDU:2025-05420

CVE-2025-31207

Produtos afetados

Ios

Ios/Ipados

Ipados

Referências · 15

• https://twitter.com/transilienceai/status/1918508442052079857 · Publicação no Twitter
• https://twitter.com/icrazeios/status/2036728209023078598 · Publicação no Twitter
• https://support.apple.com/en-us/122404 · Aviso do Fabricante
• https://twitter.com/seanistethered/status/1922703062935724058 · Publicação no Twitter
• https://twitter.com/ichitaso/status/1918575178252206216 · Publicação no Twitter
• https://cybersecurity-help.cz/vdb/SB2025051303 · Nota
• https://osv.dev/vulnerability/CVE-2025-31207 · Aviso do Fabricante
• https://reddit.com/r/CVEWatch/comments/1kegdvw/top_10_trending_cves_04052025 · Publicação no Reddit
• https://reddit.com/r/CVEWatch/comments/1kf7xj0/top_10_trending_cves_05052025 · Publicação no Reddit
• https://twitter.com/c4ndyf1sh/status/1924956320379113785 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1922053062547456336 · Publicação no Twitter
• https://twitter.com/grok/status/1918572558276063351 · Publicação no Twitter
• http://seclists.org/fulldisclosure/2025/May/5 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-31207 · Nota de Segurança
• https://bdu.fstec.ru/vul/2025-05420 · Nota de Segurança