An iOS update for iPhone and iPad was released yesterday that fixes several types of vulnerabilities and security issues, mainly for devices released before the iPhone 7, that is, before 2016.
In iOS 12.5.5, users will find fixes for vulnerabilities related to CoreGraphics, WebKit, and XNU. A vulnerability has been discovered for XNU that allows a malicious application to execute arbitrary code with kernel privileges. Apple noted that "an exploit for this issue really exists," but did not report that the vulnerability was actively exploited.
For WebKit, “maliciously crafted web content” can potentially lead to arbitrary code execution. This vulnerability differs from the XNU issue because Apple is aware of cases in which the WebKit issue may have been "actively exploited."
The CoreGraphics vulnerability worked by processing a malicious PDF file. This vulnerability could initiate arbitrary code execution through the specified malicious PDF file. The fix removes integer overflow with improved input validation.
This update is required for iPhone 5s, iPhone 6 and 6 Plus, iPad Air (1st generation), iPad mini 2, iPad mini 3, and iPod touch 6th generation. You can download this software update by going to Settings - General - Software Update.
0 Comments