CVE-2024-54470

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1. An attacker with physical access may be able to access contacts from the lock screen.
References
Link Resource
https://support.apple.com/en-us/121563 Vendor Advisory Release Notes
https://support.apple.com/en-us/121567 Vendor Advisory Release Notes
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:18.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:18.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

History

14 Mar 2025, 13:48

Type Values Removed Values Added
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:18.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:18.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
First Time Apple ipados
Apple
Apple iphone Os
CWE NVD-CWE-noinfo
References () https://support.apple.com/en-us/121563 - () https://support.apple.com/en-us/121563 - Vendor Advisory, Release Notes
References () https://support.apple.com/en-us/121567 - () https://support.apple.com/en-us/121567 - Vendor Advisory, Release Notes
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.6

15 Jan 2025, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-15 20:15

Updated : 2025-03-14 13:48


NVD link : CVE-2024-54470

Mitre link : CVE-2024-54470


JSON object : View

Products Affected

apple

  • ipados
  • iphone_os