Apple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability that is actively exploited in the wild in attacks targeting Phones and iPads. This vulnerability, tracked as CVE-2021-30883, is a critical memory corruption bug in the IOMobileFrameBuffer allowing an application to execute commands on vulnerable devices with kernel privileges. As kernel privileges allow the application to execute any command on the device, threat actors could potentially use it to steal data or install further malware. While Apple has not provided any details on how this vulnerability was used in attacks, they state that there are reports of it being actively used in attacks. “Apple is aware of a report that this issue may have been actively exploited,” the company said in a security advisory published earlier today.
Apple purposely keeps vulnerability reports vague to make sure the update is applied to as many devices as possible before other threat actors can learn the details or reverse engineer the patch to create their own exploits. However, soon after the vulnerability was released, security researcher Saar Amar published a technical writeup and proof-of-concept exploit that was derived from reverse engineering the patch.
The list of impacted devices is quite extensive, affecting older and newer models, including iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation). It is highly recommended to download and apply this patch as soon as possible.