Medium · 4.6 CVE-2024-40840 EUVD-2024-38677GHSA-9mpj-7whj-6m8h

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access m…

Published Sep 16, 2024 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Platform: iOS

Description

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to use Siri to access sensitive user data.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	< 18	18

Advisories 3

WID-SEC-2024-2153 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 24, 2025
NCSC-2024-0457 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Nov 20, 2024
NCSC-2024-0382 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Sep 26, 2024

References

https://support.apple.com/en-us/121250

EUVD	v3.1	4.6
CISA-ADP	v3.1	4.6