IOS bypasses album permission vulnerability
There is an app on App Store called the time Planning Bureau that can read photos without permission for albums. Maybe App called Apple's private library, bypassing the authorization mechanism of the system.
Test in iOS 12.1.1, download and open the application, click the menu customization widget, click "customize", and then prompt "the time Planning Bureau wants to access your photos", and click disallow to still access your photos, as shown in the following figure:
Test 10.3.3 did not find a problem with permission bypass.
App Store has a copycat app. Note that the genuine "time Planning Bureau" charges 1 yuan when downloading.
Original address: https://www.exchen.net/ios-hacker-iphone-album-0day.html
