CVE-2025-43452 iOS/iPadOS锁屏键盘建议敏感信息泄露漏洞

// CVE-2025-43452 PoC - iOS/iPadOS Lock Screen Keyboard Suggestion Information Disclosure // Note: This is a conceptual PoC as physical access is required /* Attack Scenario: 1. Attacker gains physical access to a locked iOS/iPadOS device 2. Attacker navigates to an input field (e.g., in Messages, Notes, etc.) 3. Attacker observes the keyboard suggestions displayed 4. Suggestions may contain sensitive information based on: - User's typing history - Contacts - Messages - Passwords (if autofill is enabled) This PoC demonstrates the observation phase: */ // Steps to reproduce: // 1. Lock iOS/iPadOS device // 2. Wake device to lock screen // 3. Attempt to access any input field // 4. Observe keyboard suggestions // 5. Note any sensitive information displayed // Example observation points: const observationPoints = { 'lock_screen_input': 'Check if keyboard suggestions appear', 'suggestion_content': 'Analyze if suggestions contain sensitive data', 'autofill_suggestions': 'Check for password/credential suggestions', 'contact_suggestions': 'Look for contact name/number suggestions' }; // Note: Actual exploitation requires physical device access // This is a non-technical PoC focused on observation rather than code execution