CVE-2025-24200 — Apple iOS and iPadOS Incorrect Authorization Vulnerability

Description

Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device.

How to fix CVE-2025-24200

No package mapping is available — consult the references below for vendor-specific guidance.

Is CVE-2025-24200 being exploited?

Yes — CVE-2025-24200 is on the CISA Known Exploited Vulnerabilities (KEV) catalog. Patch immediately.

Affected packages (0)

No package mapping in OSV.