This vulnerability involves improper handling of camera metadata access in Apple iOS and iPadOS, which could allow a malicious app to capture the user's screen without authorization. Apple has fixed this issue by improving the logic controlling app access to camera metadata in iOS 18.7.9, iPadOS 18.7.9, iOS 26.5, iPadOS 26.5, and visionOS 26.5. The vulnerability affects multiple Apple operating systems and could lead to privacy breaches if exploited. No CVSS score or detailed exploitation methods are provided. The fix is included in the specified OS versions, indicating an official patch is available.

If exploited, this vulnerability could allow an app to capture the user's screen content without permission, leading to potential privacy violations and unauthorized data disclosure. No known exploits have been reported in the wild, and the issue is addressed in recent OS updates, reducing the risk for users who have applied these patches.

Users and administrators should ensure devices are updated to iOS 18.7.9, iPadOS 18.7.9, iOS 26.5, iPadOS 26.5, or visionOS 26.5 or later, where this vulnerability has been fixed. Since the vendor advisory indicates the issue is resolved in these versions, applying these updates is the recommended remediation. Patch status is confirmed by the vendor advisory stating the issue is fixed in these releases.