Arbitrary file overwrite via undisclosed path traversal

Path traversal in Notes on Apple iOS, iPadOS, macOS, and visionOS allows attackers to overwrite arbitrary files through a malicious app. The published CWE mapping identifies improper pathname restriction, but Apple has not disclosed the affected Notes code path or how it handles attacker-controlled paths. Execution of a malicious app is required, and successful exploitation can replace files accessible through the vulnerable Notes operation.