CVE Vulnerabilities

CVE-2025-30432

Improper Authentication

Published: Mar 31, 2025 | Modified: Apr 07, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A logic issue was addressed with improved state management. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sonoma 14.7.5. A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Ipados Apple * 17.7.6 (excluding)
Ipados Apple 18.0 (including) 18.4 (excluding)
Iphone_os Apple * 18.4 (excluding)
Macos Apple 13.0 (including) 13.7.5 (excluding)
Macos Apple 14.0 (including) 14.7.5 (excluding)
Tvos Apple * 18.4 (excluding)
Visionos Apple * 2.4 (excluding)

Potential Mitigations

References