Sign in Subscribe

Apple Addresses Critical Security Flaws in iOS and iPadOS

Pedro Gonzalez

• 1 min read
Apple Addresses Critical Security Flaws in iOS and iPadOS

In a recent update, Apple has patched two significant security vulnerabilities affecting iOS and iPadOS devices. These fixes come as part of the company's ongoing efforts to enhance user privacy and security.

The first vulnerability, identified as CVE-2024-44204, posed a serious threat to user privacy. This flaw, discovered by security researcher Bistrit Daha, could have allowed the VoiceOver assistive technology to audibly read out a user's saved passwords. The issue stemmed from a logic problem in the new Passwords app, potentially exposing sensitive information to anyone within earshot.

This vulnerability affected a wide range of Apple devices, including:

  • iPhone XS and newer models
  • iPad Pro (all 11-inch models and 3rd generation or later 12.9-inch models)
  • iPad Air (3rd generation and later)
  • iPad (7th generation and later)
  • iPad mini (5th generation and later)

Apple has addressed this issue by implementing improved validation measures in the latest update.

The second vulnerability, CVE-2024-44207, was specific to the recently launched iPhone 16 models. This flaw, reported by Michael Jimenez and an anonymous researcher, allowed the capture of audio before the microphone indicator was activated. Specifically, the bug affected audio messages in the Messages app, potentially recording a few seconds of sound without the user's knowledge.

Apple has resolved this issue by introducing improved checks in the Media Session component.

To protect against these vulnerabilities, Apple strongly recommends that users update their devices to iOS 18.0.1 and iPadOS 18.0.1. These updates not only address the mentioned security flaws but also likely include other improvements and bug fixes.

This incident serves as a reminder of the importance of keeping devices updated with the latest software versions. It also highlights Apple's commitment to quickly addressing security issues as they are discovered, maintaining the trust of its vast user base.

As always, users should remain vigilant about their digital security, regularly update their devices, and be aware of the permissions they grant to applications and features on their devices.