CVE-2018-5283: Improper Limitation of a Pathname to a Restricted Directory

The Photos in Wifi application 1.0.1 for iOS has directory traversal via the ext parameter to assets-library://asset/asset.php...