PT-2025-10623 · Apple · Ipados+3

Ron Masas · Published 2024-09-16 · Updated 2025-03-27 · CVE-2024-54558

Positive Technologies (AI Summary)

CVSS v2.0

3.2

Low

Base vector

AV:L/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18 iPadOS versions prior to 18 macOS Sequoia versions prior to 15

Description A clickjacking issue was addressed with improved out-of-process view handling. This issue may allow an app to trick a user into granting access to photos from the user's photo library.

Recommendations For iOS versions prior to 18, update to iOS 18 or later. For iPadOS versions prior to 18, update to iPadOS 18 or later. For macOS Sequoia versions prior to 15, update to macOS Sequoia 15 or later.

Fix

Clickjacking

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-1021

CWE-451

Related Identifiers

BDU:2025-02518

CVE-2024-54558

Affected Products

Apple Macos

Ios

Ipados

Macos Sequoia

References · 12

• https://support.apple.com/en-us/121250 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-54558 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-54558 · Security Note
• https://support.apple.com/en-us/121238 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02518 · Security Note
• https://cybersecurity-help.cz/vdb/SB2024091707 · Note
• https://t.me/cvenotify/114154 · Telegram Post
• https://twitter.com/cybercronai/status/1899705784541364349 · Twitter Post
• https://twitter.com/CVEnew/status/1899179875174400209 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54558 · Note
• https://t.me/cvenotify/116489 · Telegram Post
• https://t.me/cvetracker/18830 · Telegram Post