iOS 8.1.1 Security Update: Kernel RCE, WebKit Memory Corruption, and Bypass Vulnerabilities

Key Information Security Content in iOS 8.1.1 CFNetwork - Impact: Website cache may not be fully cleared after leaving Private Browsing - Description: Browsing data may remain in cache after exiting Private Browsing; resolved by modifying cache behavior - CVE-ID: CVE-2014-4460 dyld - Impact: Local user may be able to execute unsigned code - Description: Issue with state management when processing Mach-O executable files; resolved by improving segment size validation - CVE-ID: CVE-2014-4455 - Reporter: @PanguTeam Kernel - Impact: Malicious application may be able to execute arbitrary code with system privileges - Description: Validation issue when handling certain metadata fields; resolved by relocating metadata - CVE-ID: CVE-2014-4461 - Reporter: @PanguTeam Lock Screen - Availability: iPhone 4s and later, iPod touch (5th generation and later), iPad 2 and later - Impact: Attacker with physical access may bypass maximum failed password attempts limit - Description: Failed password attempt limit not enforced in certain cases; resolved by enforcing the limit - CVE-ID: CVE-2014-4451 - Reporter: Stuart Ryan, University of Technology Sydney Lock Screen - Impact: User with physical access may be able to access photos in the photo library - Description: FaceTime's "Message" option may allow viewing and sending device photos; resolved by improving state management - CVE-ID: CVE-2014-4463 Sandbox Profiles - Impact: Malicious application may be able to launch arbitrary binaries on trusted devices - Description: Permission issue in debugging feature allowing app launch on non-debugged devices; resolved by modifying debug server sandbox - CVE-ID: CVE-2014-4457 - Reporter: @PanguTeam Spotlight - Impact: Unnecessary information included when connecting to Spotlight server - Description: Initial connection includes user's approximate location before query; resolved by removing this info from initial connection and sending location only during query - CVE-ID: CVE-2014-4453 - Reporter: Ashkan Soltani WebKit - Impact: Accessing maliciously crafted websites may lead to app crashes or arbitrary code execution - Description: Multiple memory corruption issues in WebKit; resolved by improving memory handling - CVE-ID: CVE-2014-4452, CVE-2014-4462 Note: FaceTime is not available in all countries/regions.

Goal Reached Thanks to every supporter — we hit 100%!

iOS 8.1.1 Security Update: Kernel RCE, WebKit Memory Corruption, and Bypass Vulnerabilities