Apple addresses CoreGraphics vulnerability that may have been exploited in targeted attacks on older iPhones
Apple has released a series of software updates for its older operating systems, including a critical fix for a security vulnerability in the CoreGraphics library. The company confirmed that this vulnerability may have already been exploited in "highly sophisticated" cyberattacks targeting specific individuals in directed attacks.
Details of the vulnerability and affected devices
The new security updates target iOS 16.7.11 and iPadOS 16.7.11, which are intended for devices that are no longer capable of running newer systems such as iOS 18. The list of affected devices includes:
- iPhone XS
- iPhone XS Max
- iPhone XR
- 7th generation iPad devices
According to Apple, processing a maliciously crafted file on these devices could lead to Arbitrary Code Execution, potentially granting an attacker control over the device.
Comprehensive updates for other operating systems
In addition to the fixes aimed at older devices, the new wave of updates included the following:
- iOS 18.1.2 and iPadOS 18.1.2: Address 134 different security vulnerabilities, although Apple did not indicate that any of them have been exploited in the wild.
- macOS Sonoma 14.7.2 and macOS Sequoia 15.1.1: Include security fixes for Mac systems.
- tvOS 18.1.1: Provided a functional update supporting the 4th generation Siri Remote on Apple TV HD and Apple TV 4K (1st generation).
What does this mean for users?
The importance of this news lies in highlighting the risks faced by users of devices that no longer support modern systems. While some may think their older devices are less vulnerable, the existence of a vulnerability that has actually been exploited in "sophisticated" attacks means these devices remain a strategic target in espionage operations or directed cyberattacks. Therefore, installing available updates immediately is a necessary step to secure personal data on these devices.