medium6.8
CVE-2025-43534
A path handling issue was addressed with improved validation.
Impact
A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS device may be able to bypass Activation Lock.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 18.7.7 from 26.0 before 26.2 |
| Apple | Iphone Os | before 18.7.7 from 26.0 before 26.2 |