When iOS 17.5 was released on May 13, users reported an unusual issue: their iPhones were resurrecting deleted photos. This phenomenon raised immediate security concerns, with users anxious that their devices were retaining data unbeknownst to them. Fortunately, the issue was addressed promptly with the subsequent release of iOS 17.5.1.
Initially, the cause of this anomaly was unclear. While early speculations pointed to a software bug, the patch notes for iOS 17.5.1 later identified “database corruption” as the culprit. However, this explanation left many unsatisfied, prompting Apple to provide a more detailed clarification.
In a statement to 9To5Mac, Apple elaborated that the resurfacing of old images was due to a “corrupt database entry” within the iPhone’s file system. This corruption was restricted to the device’s local storage and did not affect files synced to iCloud. Consequently, images deleted from iCloud continued to exist on the iPhone, hidden from view, and reappeared with the installation of iOS 17.5.
Apple also clarified that this database corruption could cause old images to appear on new iPhones through file transfers or iCloud backups.
Addressing the Issue
While Apple did not detail its resolution method, cybersecurity experts at Synacktiv conducted a reverse engineering analysis of iOS 17.5.1 to understand the fix. Their exhaustive report revealed that Apple had introduced a “migration routine” in iOS 17.5, which contained a bug that scanned the iPhone’s file system for photographs. Upon locating these images, the routine added them back to the photo library, causing previously deleted images to reappear.
Interestingly, iOS 17.5.1 removed this migration routine but did not eliminate the lingering files. According to Synacktiv, Apple did not delete the remnants of the “‘deleted” pictures that still reside within the file system.
A Design Choice, Not a Flaw
The report references a Reddit post from May 20, wherein a user claims to know a private contractor working with Apple who provided insights into the situation. Despite the unverified nature of this source, they suggest that iPhones may save images or screenshots to both the Files and Photos apps under certain conditions, the specifics of which remain unclear. Therefore, even if a user deletes a photo from the Photos app, an identical copy might exist in Files, and this is what the flawed migration routine was recovering.
The Reddit user also emphasized that Apple is not engaging in surveillance. This issue does not constitute a backdoor into iCloud, assuring users that their data remains largely secure.
The question of why iOS saves duplicate copies of certain images remains unanswered, leaving this as a topic for future investigation. Efforts to seek further clarification from Apple are ongoing, and any updates will be provided as they become available.
