Apple ios 12.1.3

Apple iOS 12.1.3 update is available for all iOS 12-running models of iPhone, iPad and iPod. The latest iOS update addresses some security issues as well. You can now update your apps to use new features, and test your apps against API changes. The iOS 12.1 SDK provides support for developing iOS apps for iPhone, iPad, or iPod touch devices running iOS 12.1.3. The SDK comes bundled with Xcode 10.1 available from the Mac App Store.

The new update is about 300MB in size addressing new features for its users. Apple iOS 12.1.3 is fcompitable for all iPhone 5S or later, iPad mini 2 or later and 6th generation iPod touch or later. Although you will be prompted to upgrade but you can also trigger it manually by navigating to Settings > General > Software Update.

Some of the resolved issues include:

  • audio distortion when using an iPad Pro to play tunes through external audio input devices
  • a pair of fixes for HomePod: one issue causing the device to restart, and another that made Siri stop listening.

About the security content of Apple iOS 12.1.3

AppleKeyStore

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: A sandboxed process may be able to circumvent sandbox restrictions
Description: A memory corruption issue was addressed with improved validation.

Bluetooth

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: An attacker in a privileged network position may be able to execute arbitrary code
Description: An out-of-bounds read was addressed with improved input validation.

Core Media

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: A malicious application may be able to elevate privileges
Description: An out-of-bounds read was addressed with improved bounds checking.

CoreAnimation

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: A malicious application may be able to read restricted memory
Description: An out-of-bounds read was addressed with improved bounds checking.

CoreAnimation

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: A malicious application may be able to break out of its sandbox
Description: A memory initialization issue was addressed with improved memory handling.

FaceTime

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution
Description: A buffer overflow issue was addressed with improved memory handling.

IOKit

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: A malicious application may be able to break out of its sandbox
Description: A type confusion issue was addressed with improved memory handling.

Kernel

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: A malicious application may be able to elevate privileges
Description: A memory corruption issue was addressed with improved validation.

Kernel

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: A malicious application may be able to execute arbitrary code with kernel privileges
Description: A memory corruption issue was addressed with improved input validation.

Kernel

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: A malicious application may cause unexpected changes in memory shared between processes
Description: A memory corruption issue was addressed with improved lock state checking.

Kernel

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A buffer overflow was addressed with improved bounds checking.

Kernel

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: A malicious application may be able to determine kernel memory layout
Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory.

Kernel

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: A malicious application may cause unexpected changes in memory shared between processes
Description: A memory initialization issue was addressed with improved memory handling.

Keyboard

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: Password autofill may fill in passwords after they were manually cleared
Description: An issue existed with autofill resuming after it was canceled.  The issue was addressed with improved state management.

libxpc

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: A malicious application may be able to execute arbitrary code with kernel privileges
Description: A memory corruption issue was addressed with improved input validation.

Natural Language Processing

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: Processing a maliciously crafted message may lead to a denial of service
Description: A denial of service issue was addressed with improved validation.

Safari Reader

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: Processing maliciously crafted web content may lead to a cross site scripting attack
Description: A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation.

SQLite

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: A maliciously crafted SQL query may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved input validation.

WebKit

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A memory corruption issue was addressed with improved memory handling.

WebKit

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: Processing maliciously crafted web content may lead to universal cross site scripting
Description: A logic issue was addressed with improved validation.

WebKit

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A type confusion issue was addressed with improved memory handling.

WebKit

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.

WebRTC

Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A memory corruption issue was addressed with improved state management.

 

 

LEAVE A REPLY

Please enter your comment!
Please enter your name here