Medium · 5.4 CVE-2025-30428 EUVD-2025-8925GHSA-vhf9-v5pf-qmcg

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the H…

Published Mar 31, 2025 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: iPadOS Platform: iOS

Description

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the Hidden Photos Album may be viewed without authentication.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	< 18.4	18.4
Apple	iPadOS	< 17.7.6	17.7.6

Advisories 2

WID-SEC-2025-0663 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 11, 2025
NCSC-2025-0103 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Apr 1, 2025

References

https://support.apple.com/en-us/122371
https://support.apple.com/en-us/122372

EUVD	v3.1	5.4
CISA-ADP	v3.1	5.4