iOS 15/iPadOS 15 Security Update: Accessory Manager RCE and other CVE fixes

Vulnerability Key Information iOS 15 and iPadOS 15 Security Content Overview Release Date: September 20, 2021 Affected Components: Accessory Manager, AppleMobileFileIntegrity, Apple Neural Engine, etc. Key Vulnerabilities 1. Accessory Manager - CVE: CVE-2021-30837 - Impact: Applications may execute arbitrary code with kernel privileges - Description: Improved memory handling resolved memory consumption issues 2. AppleMobileFileIntegrity - CVE: CVE-2021-30811 - Impact: Local attackers may read sensitive information - Description: Improved checks resolved this issue 3. Apple Neural Engine - CVE: CVE-2021-30838 - Impact: Malicious applications may execute arbitrary code with system privileges on devices with Apple Neural Engine - Description: Improved memory handling resolved memory corruption issues Example Vulnerability Details CoreAudio CVE: CVE-2021-30834 Impact: Processing malicious audio files may lead to unexpected app termination or arbitrary code execution Description: Improved state management resolved logic issues CoreGraphics CVE: CVE-2021-30928 Impact: Processing malicious images may lead to arbitrary code execution Description: Improved input validation resolved memory corruption issues CoreML CVE: CVE-2021-30857 Impact: Local attackers may cause unexpected app termination or arbitrary code execution Description: Improved checks resolved this issue Conclusion This page provides detailed information on vulnerabilities fixed in various components of iOS 15 and iPadOS 15, including CVE numbers, impacts, and fix descriptions. Multiple vulnerability fixes involve memory management, code execution protection, and privilege issues, emphasizing the importance of security updates.

Goal Reached Thanks to every supporter — we hit 100%!

iOS 15/iPadOS 15 Security Update: Accessory Manager RCE and other CVE fixes