Security fixes: Apple fixes countless gaps – including the first in the C1

Apple’s operating system updates for iPhone, Mac, iPad, Apple Watch, Apple TV and Vision Pro have once again contained a whole bundle of safety -relevant error fixes. Some of the bugs are critical, and for the first time a gap in Apple’s mobile phone modem C1 was discovered and closed with the iPhone 16E. Older operating systems were also updated, as usual, but not with all fixes.

iOS 18.5 and iPados 18.5

The updates to iOS 18.5 (iPhone) and iPados 18.5 (iPad) come along Over 30 error fixes carried out by Apple. In addition, there are 15 “credits”, in which Apple only calls the area in which a fix was incorporated, but in addition to the information of the respective detector, there is no further information. This is usually made up for weeks or months later – apparently to prevent exploits from being developed (too quickly), even if security experts always reject such “Security Through Obscurity”.

At least two of the gaps mentioned by Apple-one in the kernel, one in the security framework-can be used from afar to end apps or read out memory. The areas that received fixed are, among other things, the picture readeroutine ApplejPEG (manipulated files were able to damage process memory), in Core Bluetooth (sensitive user data), in CoreGraphics (DITO), Coremedia (app drop) as well as FaceTime (Denial of Service) and iCloud-Document sharing (The attacker could release folders without registering). Partly critical errors were also in the browser engine web kit, in MDNSResponder and other system parts. Interesting: For the first time, Apple was reported a bug in the C1 chip, which was also fixed. With the iPhone 16E it was therefore possible that an attacker was listening to data traffic, but only if he was in a “privileged network positon”. Apple does not indicate what this means – for example whether the person had to be in WLAN or in the mobile network itself.

MacOS 15.5, Safari and other systems

Apple mentions over 45 fixed error areas At MacOS 15.5. The group does not (yet) communicate details of more than another dozen. In addition to the problems resolved in iOS 18.5 and iPados 18.5, the AFP-daemon (error could lead to system crash), Apple Intelligence (AI reports were accessible), BOM and audio (crashes through web content and apps), finder (access to sensitive data by apps), PRORES (crashes of the system and the kernels) and sandbox (Data protection gaps). Numerous bugs in webkit have also been remedied.

Stand for older systems MacOS 13.7.6 (Ventura) and MacOS 14.7.6 ready for download. They remedy some of the gaps from MacOS 15. Some fixes are also used for iPados 17 in the form of Ipados 17.7.7 delivered. Safari 18.5, which is part of MacOS 15.5, is available For Ventura and Sonoma Also as a single update that contains the web kit error deposits. The Apple Watch (Watchos 11.5), Apple TV (TVOS 18.5 and vision pro (Visionos 2.5). Many of the problems resolved in iOS 18.5 and MacOS 15.5 are also addressed in the other systems.