Home Latest News Apple Releases Urgent iPhone and iPad Updates to Patch New Zero-Day Vulnerability...

Apple Releases Urgent iPhone and iPad Updates to Patch New Zero-Day Vulnerability – The Hacker News

Ads

Apple on Monday released a security update for iOS and iPad to address a critical vulnerability that it says is being exploited in the wild, making it the 17th zero-day flaw the company has addressed in its products since the start of the year.
The weakness, assigned the identifier CVE-2021-30883, concerns a memory corruption issue in the “IOMobileFrameBuffer” component that could allow an application to execute arbitrary code with kernel privileges. Crediting an anonymous researcher for reporting the vulnerability, Apple said it’s “aware of a report that this issue may have been actively exploited.”
Technical specifics about the flaw and the nature of the attacks remain unavailable as yet, as is the identity of the threat actor, so as to allow a majority of the users to apply the patch and prevent other adversaries from weaponizing the vulnerability. The iPhone maker said it addressed the issue with improved memory handling.
But soon after the advisory was released, security researcher Saar Amar shared additional details, and a proof-of-concept (PoC) exploit, noting that “this attack surface is highly interesting because it’s accessible from the app sandbox (so it’s great for jailbreaks) and many other processes, making it a good candidate for LPEs exploits in chains.”
CVE-2021-30883 is also the second zero-day impacting IOMobileFrameBuffer after Apple addressed a similar, anonymously reported memory corruption issue (CVE-2021-30807) in July 2021, raising the possibility that the two flaws could be related. With the latest fix, the company has resolved a record 17 zero-days to date in 2021 alone —
Apple iPhone and iPad users are highly recommended to update to the latest version (iOS 15.0.2 and iPad 15.0.2) to mitigate the security vulnerability.
Sign up for cybersecurity newsletter and get latest news updates delivered straight to your inbox daily.

source

Ads
Previous articleRR vs RCB, IPL 2022 Qualifier 2 Live Cricket Streaming: Watch Free Telecast of Rajasthan Royals vs Royal – LatestLY
Next articleRooks: Some progress in Maine, but $850 checks are a lost opportunity – Seacoastonline.com
Abhinav Breathes and Bleeds Technology. He's a humanoid with a passion for Gadgets, Cars, Gaming. You can usually find him on PSN Blabbering about his FIFA skills.