New iPhone Bug Lets Anyone Grab Your Private Photos

An iOS user has found out a fairly simple easy way to access the photo album of a locked iPhone, select photos and send them to anyone using Apple Messages. The passcode bypass requires about a dozen steps, as demonstrated in a video posted on YouTube.

The bug is similar to one discovered in late September, which let anyone with physical access to your iPhone see your contacts and their associated photos in iOS 12. That bypass was patched in the iOS 12.0.1 update released last week, but this new one works in 12.0.1 and will likely require a new update to patch.

Until Apple fixes this bug, you can avoid this issue by going to Touch ID & Passcode in Settings to disable access to Siri when your phone is locked. Because nearly all of the passcode bypasses we've seen in the past years have involved Siri, we recommend that you disable Siri from the lockscreen permanently.

MORE: iOS 12's Security Features: The Good and the Bad

Both bugs, discovered by Spanish amateur researcher José Rodríguez, require physical access to an iPhone. However, this latest one is easier to perform that the bug from two weeks ago, which took 37 steps to pull off. The new one requires much less effort and basically leaves any iPhone user vulnerable to a nosy friend or spouse who could access the phone's photo album and grabbing private pics.

Here’s how the bypass works, according to Rodríguez’s video:

  • Call the target phone from any other phone.
  • Instead of answering the call, click on "Message" in the call window.
  • Select "Custom" to reply via text message. That will open the Messages input screen.
  • Invoke Siri to activate VoiceOver, the iOS feature that helps sight-impaired users use an iPhone.
  • Click on the camera icon.
  • Invoke Siri with the iPhone’s home button while you double-tap the display. The screen will turn black. This is where the bug kicks in and iOS gets confused.
  • From here, click on the home button again while the screen remains black.
  • Swipe up to the upper left corner while the screen remains black. VoiceOver will tell you what you have selected.
  • Keep swiping to the top left corner until VoiceOver tells you that you can select the Photo Library ("Fototeca" in Rodriguez' video).
  • Tap to select Photo Library.
  • After selecting the Photo Library, iOS will take you back to the message screen, but you'll see a blank space where the keyboard should be. The blank space is actually an invisible Photo Library.
  • Click on the shelf handle on top of the blank space to activate the Photo Library.
  • Now you only have to swipe and double tap to start grabbing photos. Each photo will be pasted in your input field, ready to be sent to any number.

Activating this bug will take some practice to get the timing right, but if you have long-term access to an iPhone, you can try as many times as you like. Once you are in, it’s easy to grab any photos.

TOPICS
Jesus Diaz

Jesus Diaz founded the new Sploid for Gawker Media after seven years working at Gizmodo, where he helmed the lost-in-a-bar iPhone 4 story and wrote old angry man rants, among other things. He's a creative director, screenwriter, and producer at The Magic Sauce, and currently writes for Fast Company and Tom's Guide.

Latest in iPhones
iPhone 17 Air render
New leaked iPhone 17 dummy units show off super-thin iPhone 17 Air with this surprising design tweak
iPhone 17 Pro render
iPhone 17 Ultra just tipped to replace Pro Max in new leak — with these key upgrades
RCS messaging on an iPhone
Forget green bubbles — iPhones will soon get encrypted RCS messaging to Androids
iOS 18 logo show on iPhone.
My favorite iOS 18.4 feature is ambient music — here's how to activate it
iPhone 17 Pro render
iPhone 17 Pro Max leak claims it’s ready for production — and seems to confirm its new design
iPhone 16e review.
iPhone 16e is facing Bluetooth problems — here's what's going on
Latest in News
NYTimes Connections
NYT Connections today hints and answers — Monday, March 17 (#645)
iPhone 17 Air render
New leaked iPhone 17 dummy units show off super-thin iPhone 17 Air with this surprising design tweak
Simone Ashley and Hero Fiennes Tiffin in "Picture This" now streaming on Prime Video
Prime Video top 10 has 3 must-watch movies — including a bubbly romcom starring 'Bridgerton's' Simone Ashley
(L-R) Josh Hartnett as Cooper and Ariel Donoghue as Riley in "Trap"
Netflix top 10 movies — here’s the 3 worth watching right now
NYT Strands on a cellphone
NYT Strands today — hints, spangram and answers for game #379 (Monday, March 17 2025)
iOS 19 logo on an iPhone
Apple WWDC 2025: iOS 19 and everything we know so far