This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Apple iOS and iPadOS fix two vulnerabilities
Apple iOS 18.0.1 and iPadOS 18.0.1 fix two vulnerabilities [1].
A logic error allows the user's saved passwords to be read aloud by VoiceOver [1][2].
The vulnerability is present in products:
- iOS; <18.0.1
- iPadOS; <18.0.1
CVSS: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
More information:
- CVE-2024-44204 at cve.org, NVD
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor at cwe.mitre.org
The vulnerability was publicly disclosed 3. 10. 2024.
The vulnerability on iPhone 16 series models allows audio to be captured before the recording indicator is activated in the Messages app, which may lead to the leakage of sensitive information [1][3].
The vulnerability is present in products:
- iOS; <18.0.1
- iPadOS; <18.0.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
More information:
- CVE-2024-44207 at cve.org, NVD
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor at cwe.mitre.org
The vulnerability was publicly disclosed 3. 10. 2024.
Links
By CESNET, z.s.p.o. Michaela Ručková on 9. 10. 2024.