CVE-2014-1281
published 2014-03-14CVE-2014-1281: Photos Backend in Apple iOS before 7.1 does not properly manage the asset-library cache during deletions, which allows physically proximate attackers to obtain…
PriorityP47low1.9CVSS 2.0
AVLACMAuNCPINAN
EPSS
0.35%
27.2th percentile
Photos Backend in Apple iOS before 7.1 does not properly manage the asset-library cache during deletions, which allows physically proximate attackers to obtain sensitive photo data by launching the Photos app and looking under a transparent image.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | iphone_os | <= 7.0.6 | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple iOS 6.1/7.0.5 Photos Backend access control (HT6162 / XFDB-91714)
vuldb·2026-05-08·CVSS 1.9
CVE-2014-1281 [LOW] Apple iOS 6.1/7.0.5 Photos Backend access control (HT6162 / XFDB-91714)
A vulnerability categorized as problematic has been discovered in Apple iOS 6.1/7.0.5. This issue affects some unknown processing of the component Photos Backend. Such manipulation leads to improper access controls.
This vulnerability is documented as CVE-2014-1281. The attack needs to be performed locally. There is not any exploit available.
It is advisable to upgrade the affected component.
GHSA
GHSA-jjjx-p2hc-qwfw: Photos Backend in Apple iOS before 7
ghsa_unreviewed·2022-05-17
CVE-2014-1281 [LOW] GHSA-jjjx-p2hc-qwfw: Photos Backend in Apple iOS before 7
Photos Backend in Apple iOS before 7.1 does not properly manage the asset-library cache during deletions, which allows physically proximate attackers to obtain sensitive photo data by launching the Photos app and looking under a transparent image.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-03-14
Published