CVE-2014-1281

iPhone OS < 7.1 - Unprotected User Data Exposure via Photos App Cache

Title source: llm
STIX 2.1

Description

Photos Backend in Apple iOS before 7.1 does not properly manage the asset-library cache during deletions, which allows physically proximate attackers to obtain sensitive photo data by launching the Photos app and looking under a transparent image.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT6162

Scores

EPSS 0.0035
EPSS Percentile 27.2%

Details

CWE
CWE-264
Status published
Products (7)
apple/iphone_os 7.0
apple/iphone_os 7.0.1
apple/iphone_os 7.0.2
apple/iphone_os 7.0.3
apple/iphone_os 7.0.4
apple/iphone_os 7.0.5
apple/iphone_os < 7.0.6
Published Mar 14, 2014
Tracked Since Feb 18, 2026