Security vulnerabilities fixed in iOS 17.4

Apple took advantage of the launch of iOS 17.4 and iPadOS 17.4 to introduce major changes around the structure of iOS in the European Union in order to comply with the Digital Markets Act. However, and no less importantly, the updates were also used to Fix relevant security bugs that could put users at risk. In fact, two security flaws have been fixed which, according to Apple, could have been used maliciously and that is why updating all our devices is highly recommended.

2 previously used security issues have been fixed in iOS 17.4 and iPadOS 17.4

iOS 17.4 and iPadOS 17.4 include bug fixes and performance improvements like any other software update. However, Apple specifies in its patch note that they have been resolved. two security issues of great importance because, as they say, “Apple is aware of a report that this issue may have been exploited.”

The App Store and the European Union

Related article:

iOS 17.4 alternative app stores will stop working if we travel outside the EU

In other words, Apple assures that these two security errors could have been used by hackers and security teams for their different purposes. One of them located in the device kernel and the other inside the development kit RTKit. This means that through these holes elements can be introduced that could violate user security and gain access to relevant user information. Here are the notes for the two errors detected by Apple:

  • Core: An attacker with arbitrary read and write capabilities to the kernel may be able to bypass kernel memory protections.
  • RTKit: An attacker with arbitrary read and write capabilities to the kernel may be able to bypass kernel memory protections.

Both errors were available on the following devices: iPhone later versions, iPad 6th generation. and later, and iPad mini 5th generation and later.

SO, The overall recommendation is to update all our devices in order to resolve these errors and be able to benefit from more security around these software-level vulnerabilities that Apple fixed in the iOS 17.4 and iPadOS 17.4 updates released yesterday.