cve/2022/CVE-2022-32872.md

### [CVE-2022-32872](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32872)
![](https://img.shields.io/static/v1?label=Product&message=iOS%20and%20iPadOS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=iOS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2015.7%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2016%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=A%20person%20with%20physical%20access%20to%20an%20iOS%20device%20may%20be%20able%20to%20access%20photos%20from%20the%20lock%20screen&color=brighgreen)

### Description

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. A person with physical access to an iOS device may be able to access photos from the lock screen.

### POC

#### Reference
- http://seclists.org/fulldisclosure/2022/Oct/39
- http://seclists.org/fulldisclosure/2022/Oct/40

#### Github
- https://github.com/ARPSyndicate/cvemon