fix two major security bugs

oriXone

fix two major security bugs

Bugs, fix, major, security

Apple confirmed the two important bugs fixed in iOS 17.4.1 and macOS 14.4.1

iOS 17.4.1 is a major update

Apple recently released iOS 17.4.1 and macOS 14.4.1, two updates intended to fix errors on iPhone and Mac, but they are bigger than they seem. As the company itself confirmed in a support document, these two updates fix two major security bugs of our devices.

It appears that these errors were present in Safari, so Apple also updated the app on older Macs and also released an iOS 16 update for iPhones that cannot install iOS 17, in iOS 16.7.7 , these are also resolved errors.

iOS 17.4.1 icon

iOS 17.4.1 now available for iPhone

Two important bugs are fixed in the new Apple updates

These two errors have been fixed in the latest updates but in previous versions they are still active, so We recommend installing iOS 17.4.1 and macOS 14.4.1 as soon as possible, iPadOS 14.4.1 is also available which resolves these same errors. Both bugs were found by the Google Project Zero team and here is how Apple describes them to you:

CoreMedia

  • Impact: Processing an image can lead to the execution of arbitrary code.
  • Description: An out-of-bounds write issue was resolved with improved input validation.
  • CVE-2024-1580: Nick Galloway of Google Project Zero.

WebRTC

  • Impact: Processing an image can lead to the execution of arbitrary code
  • Description: An out-of-bounds write issue was resolved with improved input validation.
  • CVE-2024-1580: Nick Galloway of Google Project Zero.

Devices that have been compromised by this failure are iPhone XS and later, 12.9-inch iPad Pro 2nd generation and later, 10.5-inch iPad Pro, 11-inch first generation and later, iPad Air 3rd generation and later, iPad 6th generation and later, and iPad mini 5th generation and later, any Mac with macOS Sonoma and previous iPhone 8, iPhone 8 Plus, iPhone

Leave a Comment