CVE-2023-32365

Vulnerability

The vulnerability resides in the Shake-to-undo feature on iOS and iPadOS. It allows a deleted photo to be re-surfaced without authentication. The issue is present in versions prior to iOS 15.7.6 and iPadOS 15.7.6, as well as iOS 16.5 and iPadOS 16.5 [1][2].

Exploitation

An attacker with physical access to an unlocked device could utilize the Shake-to-undo gesture to potentially bypass the authentication check and access a deleted photo [1][2]. The exact steps are not detailed in public references, but it likely involves shaking the device to trigger the undo action on recent deletions.

Impact

Successful exploitation could lead to unauthorized access to a deleted photo, bypassing the device's authentication mechanism [1][2]. This represents a breach of confidentiality, as the attacker could view sensitive images that were intended to be permanently removed.

Mitigation

The issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, as well as iOS 16.5 and iPadOS 16.5 [1][2]. Users should update their devices to these versions or later via the Settings app. No workarounds are documented for unpatched versions.