CVE-2024-44225

Vulnerability

Overview

CVE-2024-44225 is a logic issue in Apple's operating systems that was addressed with improved checks. The flaw exists in the handling of file permissions or authentication mechanisms, allowing a malicious app to bypass security boundaries and gain elevated privileges. This issue affects iOS, iPadOS, macOS, tvOS, and watchOS, with fixes released in December 2024 updates [1][2][3][4].

Exploitation

An attacker would need to have an app installed on the target device to exploit this vulnerability. No additional authentication is required beyond the initial app installation; the logic issue can be triggered by the app's normal operations. The attack surface is local, meaning the app must be running on the device, but no special network position is needed [1][2].

Impact

Successful exploitation allows the app to gain elevated privileges, which in this context can lead to viewing the Hidden Photos Album without authentication. This bypasses the intended privacy controls that require user authentication to access hidden photos. The impact is a breach of confidentiality, as sensitive photos can be exposed [1][2][3][4].

Mitigation

Apple has addressed this issue in the following updates: iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, and watchOS 11.2. Users are strongly advised to update their devices to the latest available versions to protect against this vulnerability [1][2][3][4].