This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 26.1 and iPadOS 26.1. Keyboard suggestions may display sensitive information on the lock screen.
The following code is for security research and authorized testing only.
python
// CVE-2025-43452 PoC - iOS/iPadOS Lock Screen Keyboard Suggestion Information Disclosure
// Note: This is a conceptual PoC as physical access is required
/*
Attack Scenario:
1. Attacker gains physical access to a locked iOS/iPadOS device
2. Attacker navigates to an input field (e.g., in Messages, Notes, etc.)
3. Attacker observes the keyboard suggestions displayed
4. Suggestions may contain sensitive information based on:
- User's typing history
- Contacts
- Messages
- Passwords (if autofill is enabled)
This PoC demonstrates the observation phase:
*/
// Steps to reproduce:
// 1. Lock iOS/iPadOS device
// 2. Wake device to lock screen
// 3. Attempt to access any input field
// 4. Observe keyboard suggestions
// 5. Note any sensitive information displayed
// Example observation points:
const observationPoints = {
'lock_screen_input': 'Check if keyboard suggestions appear',
'suggestion_content': 'Analyze if suggestions contain sensitive data',
'autofill_suggestions': 'Check for password/credential suggestions',
'contact_suggestions': 'Look for contact name/number suggestions'
};
// Note: Actual exploitation requires physical device access
// This is a non-technical PoC focused on observation rather than code execution