iOS 12.1.4 fixes two more critical bugs. Hackers discovered them even before Apple

11. 2. 2019

iOS 12 was originally supposed to be just an improved version of the previous iOS 11, but is that really the case? After discovering a critical bug in group FaceTime calls where it was possible to eavesdrop on the other party without receiving the call, two more bugs are coming.

Hackers managed to use the mentioned errors even before they were known to Apple. Well, at least with this statement he came Google security expert Ben Hawkes, who claims that Apple in the change log iOS 12.1.4 identified the bugs as CVE-2019-7286 and CVE-2019-7287.

For the attack, the hackers used a so-called zero-day attack, which in informatics is the name of an attack or threat that tries to exploit software vulnerabilities in the system, is not yet generally known and there is no protection for it (in the form of antivirus or updates). The title here does not indicate a number or any number of days, but the fact that the user is at risk until the update is released.

It's not entirely clear what the bugs were used for, but one of them involved a memory issue where iOS allowed apps to repeatedly gain elevated permissions. The second bug involved the system kernel itself, but other details are unknown. The bug affected all Apple devices that can install iOS 12.

iOS 12.1.4 also re-enables and fixes FaceTime group calls and should fix these two security flaws as well.

Photo: EverythingApplePro

Source: MacRumors

Topics: hacker, iOS 11, iOS 12, FaceTime, MacRumors, memory, Google, iOS, user, Application

Discussion of the article

Thor Stein

13. 2. 2019 0:47

Cow. After all, the best and most secure system cannot have the xxxth version of an error.

Your name

Your comment

By filling in the above data, I acknowledge that the company TEXT FACTORY s.r.o., registered office in Brno, Durďákova 336/29, Černá Pole, ZIP code: 613 00, ID number: 06157831, registered at the Regional Court in Brno, section C, insert 100399, will process my personal data provided in the registration form filled out by me on the basis of the legitimate interests of TEXT FACTORY s.r.o. according to Article 6 paragraph 1 letter f) GDPR and to fulfill legal obligations (Article 6, paragraph 1, letter c) GDPR), for the following purposes: the necessity to ensure the authorization of visitors to websites operated by TEXT FACTORY s.r.o. to actively contribute to published articles or within discussion forums and exercising the rights of TEXT FACTORY s.r.o. as the administrator of these discussion forums. More information about the processing of personal data and rights can be found in Lessons on personal data protection. the entire text

It could be interest you

Related