CVE-2014-1281 — Apple Iphone OS vulnerability

CWE-2642 documents2 sources
Severity
1.9LOWNVD
EPSS
0.1%
top 80.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Iphone OS
Timeline
PublishedMar 14
Latest updateMay 17

Description

Photos Backend in Apple iOS before 7.1 does not properly manage the asset-library cache during deletions, which allows physically proximate attackers to obtain sensitive photo data by launching the Photos app and looking under a transparent image.

CVSS vector

AV:L/AC:M/C:P/I:N/A:NExploitability: 3.4 | Impact: 2.9

Affected Packages1 packages

▶NVDapple/iphone_os7.0.6+6

🔴Vulnerability Details

1
GHSA
GHSA-jjjx-p2hc-qwfw: Photos Backend in Apple iOS before 7↗2022-05-17
▶
CVE-2014-1281 — Apple Iphone OS vulnerability | cvebase