This vulnerability allows an app on Apple iOS and iPadOS to view autocompleted contact information from Messages and Mail by accessing system logs that did not sufficiently redact sensitive data. The issue is classified under CWE-200 (Exposure of Sensitive Information). Apple fixed the issue by enhancing redaction mechanisms in system logs, with the patch released in iOS 18.2 and iPadOS 18.2. The CVSS 3.1 base score is 4.0, reflecting low complexity and local attack vector with limited confidentiality impact. No integrity or availability impacts are reported. No known exploits have been observed in the wild.

An attacker with local access to the device could potentially read autocompleted contact information from system logs, leading to limited exposure of sensitive contact data. There is no impact on data integrity or system availability. The confidentiality impact is low, as only autocompleted contact information is exposed, and exploitation requires local access without user interaction.

This vulnerability is fixed in iOS 18.2 and iPadOS 18.2. Users and administrators should update affected devices to these versions or later to remediate the issue. No additional mitigation steps are required beyond applying the official update.