Medium · 5.0 CVE-2025-30434 EUVD-2025-8920GHSA-2xcc-3vq7-mvjp

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.4 and iPadOS 18.4. Processing a maliciously crafted…

Published Mar 31, 2025 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Platform: iOS

Description

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.4 and iPadOS 18.4. Processing a maliciously crafted file may lead to a cross site scripting attack.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	< 18.4	18.4

Advisories 2

WID-SEC-2025-0663 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 11, 2025
NCSC-2025-0103 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Apr 1, 2025

References

https://support.apple.com/en-us/122371

EUVD	v3.1	5.0
CISA-ADP	v3.1	5.0