The vulnerability stems from improper cache handling in iOS and iPadOS, allowing an attacker with physical access to an unlocked device to retrieve an image that was previously viewed in a locked note. This disclosure of private image content is a direct compromise of user confidentiality. The flaw is classified as CWE‑922, reflecting issues related to cached data leakage.

Apple iOS and iPadOS devices are affected if they run a version prior to iOS 18.7, iPadOS 18.7, iOS 26, or iPadOS 26. The official fix was integrated in those update releases, so any device operating on older firmware inherits the vulnerability.

The CVSS score of 4.0 indicates moderate severity, while an EPSS score of less than 1% suggests a very low probability of exploitation. The flaw is only exploitable when the attacker has physical possession of an unlocked device, limiting its remote reach. The vulnerability is not listed in the CISA KEV catalog, further supporting its low current exploitation risk. Nevertheless, any device that remains on affected firmware should be upgraded immediately to mitigate the confidentiality risk.