Frequent multimedia, photo, audio and audio streaming of mobile phones is usually done favorite attacker target for malicious code entry or exploiting the risks in the operating system. Google recently conducted a study showing that Apple has many bugs of this type on all its platforms, though these are now fixed.
A new Google report revealed a few bugs that were previously present in Apple's software and involved multimedia processing. This text focuses on explaining one of the important symptoms of this type of problem, namely does not require user interaction, because the active components are automatically activated, leaving the devices at the mercy of an attack.
Apple is fixing bugs that affect all platforms
This research focuses on the Apple ecosystem and on the image analysis API you provide: the ImageIO framework. Errors made use of multimedia, especially for messaging services which automatically transfers new photos, audio and video to the iPhone operating system before processing it.
We recommend | The macOS bug can run out of space on your Mac
According to Google, the investigation was done taking into consideration all the factors "They are satisfied with the attack situation", which makes some research the power of the released code for image analysis. So, all the scams have to do is find a way to send the wrong media file to the device, wait until that file is processed, until the risk is exploited.
In today's hyper-connected world, sharing photos and videos is one of the most common forms of user interaction. Because of this, the shortcomings in multimedia processing are currently one of them mistakes that were desperately needed for safety, because they allow the silent entry veator, without clicking and without user interaction. And despite Apple's consistent security measures involved in its products and services, this work is never ending.
