Location-data disclosure via insufficient path validation

Path traversal in Maps on affected Apple operating systems allows attackers to read sensitive location information through a malicious app. Maps performs insufficient validation while handling an app-controlled path, but Apple has not disclosed the affected path or file operation. An app must run on the device and user interaction is required; the reported consequence is location-data disclosure, not modification or service interruption.