CVE-2015-5892: Infoleak
Siri in Apple iOS before 9 allows physically proximate attackers to bypass an intended client-side protection mechanism and obtain sensitive content-notification information by listening to a device in the lock-screen state.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5892?
CVE-2015-5892 is classified as a medium severity vulnerability that allows sensitive content to be accessed through Siri while the device is locked.
How do I fix CVE-2015-5892?
To mitigate CVE-2015-5892, it is recommended to update to iOS version 9 or later, which addresses the vulnerability.
Who is affected by CVE-2015-5892?
CVE-2015-5892 affects Apple iOS versions prior to 9, specifically versions 8 and below.
What type of attack does CVE-2015-5892 enable?
CVE-2015-5892 allows physically proximate attackers to listen to sensitive information through Siri on a locked device.
What is the potential impact of CVE-2015-5892?
The potential impact of CVE-2015-5892 includes unauthorized access to sensitive notifications and information on devices running vulnerable iOS versions.