5.5
Medium
CVE-2025-24104 This issue was addressed with improved handling of symlinks
Description
This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4. Restoring a maliciously crafted backup file may lead to modification of protected system files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iPadOS 17.7 | earliest → < 17.7.4 | 17.7.4 |
| iOS and iPadOS 18.3 | earliest → < 18.3 | 18.3 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
Timeline
- Published
- Last modified
Other CVEs of iPadOS
The 166 CVEs of iPadOS →
CVE-2026-28950
A logging issue was addressed with improved data redaction
6.2
Medium
CVE-2025-43210
An out-of-bounds access issue was addressed with improved bounds checking
6.3
Medium
CVE-2025-31216
The issue was addressed with improved checks
2.4
Low
CVE-2025-43374
An out-of-bounds read was addressed with improved bounds checking
4.3
Medium