Pierluigi Paganini
October 25, 2016
Yes, it’s correct! A booby trapped JPEG image could compromise your vulnerable iPhone remotely.
The Apple devices are affected by a critical remote-code execution flaw, tracked as CVE-2016-4673, for this reason, the tech giant has released a new version of its mobile operating system, iOS 10.1, that addressed the issue alongside other bugs. Below the description of the flaw provided by Apple.
CoreGraphics
Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later
Impact: Viewing a maliciously crafted JPEG file may lead to arbitrary code execution
Description: A memory corruption issue was addressed through improved memory handling.
CVE-2016-4673: Marco Grassi (@marcograss) of KeenLab (@keen_lab), Tencent
As usually happens in these cases, it is crucial a rapid patch management, users have to update their OS to fix the problems. Unfortunately, this is not true and hackers worldwide could take control of the vulnerable Apple devices in a very simple way.
The newest iOS 10.1 includes also other security updates that address 11 security flaws in the firmware for the iPhone, iPad, and iPod Touch.
The list of vulnerabilities fixed with the iOS 10.1 release includes a local code execution vulnerability, a vulnerability in contacts (CVE-2016-4686), a remote code execution flaw in WebKit (CVE-2016-4677).
Don’t waste time, update your mobile devices to the iOS 10.1 release as soon as possible.
To update your iOS device go to Settings → General → Software Update.
[adrotate banner=”9″]
(Security Affairs – iOS 10.1, Iphone)
