A vulnerability has been discovered in Apple iOS, which could allow for arbitrary code execution. Apple iOS is a mobile operating system for mobile devices, including the iPhone, iPad, and iPod touch. Successful exploitation of this vulnerability could result in arbitrary code execution with system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
THREAT INTELLIGENCE:
There are currently no reports of these vulnerabilities being exploited in the wild.
- iOS versions prior to 12.4.1
A vulnerability has been discovered in Apple iOS, which if exploited could allow for arbitrary code execution with system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The vulnerability exists due to a use-after-free error. Specifically, this issue occurs due to stale pointer left by 'in6_pcbdetach()' function.
- After appropriate testing, immediately apply patches provided by Apple.
- Remind users not to download, accept, or execute files from un-trusted or unknown sources.
- Remind users not to visit untrusted websites or follow links provided by unknown or un-trusted sources.