On April 16, Apple officially released the iOS 18.4.1, iPados 18.4.1, MacOS Sequoia 15.4.1, TVOS 18.4.1 and Visionions 2.4.1 with the main goal of patching serious security holes. According to an announcement from Apple, these gaps may have been exploited in sophisticated attacks on specific individuals.
The first error affects the Coraudio system, allowing hackers to insert malicious code through a special sound file. If this audio file processing device can be executed. Apple has handled errors by improving the control of the memory area.
The second error is related to the Pointer Authentication. The attacker has the ability to read/record arbitrary can pass this protective layer, thereby manipulating the system memory. To prevent exploitation, Apple removed the easily attacked code.
In addition to security patches, iOS 18.4.1 also fixes a error that makes some vehicles unable to connect properly to wireless carplay.
Because the holes can be exploited in a real environment, Apple recommends that users update the device immediately to ensure information security.
