Két aktívan kihasznált, súlyos hibát javít az iOS 18.4.1 és iPadOS 18.4.1

Don't wait to update: iOS 18.4.1 addresses two actively exploited vulnerabilities https://t.co/ShidH63XBM #Apple

— AppleInsider (@appleinsider) April 17, 2025

Az Apple tegnap kiadta az iOS 18.4.1 és iPadOS 18.4.1 telefon/tablet firmware-eket. A kiadás két aktívan kihasznált, súlyos sebezhetőséget javít, így érdemes mielőbb frissíteni:

CoreAudio

Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 13.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later

Impact: Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.

Description: A memory corruption issue was addressed with improved bounds checking.

CVE-2025-31200: Apple and Google Threat Analysis Group

RPAC

Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 13.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later

Impact: An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.

Description: This issue was addressed by removing the vulnerable code.

CVE-2025-31201: Apple

Részletek itt.