Apple Addresses Memory Corruption Vulnerability Across Multiple Products

What changed

Apple has resolved a memory corruption vulnerability that affected multiple products, enhancing security through improved checks. The vulnerability could potentially allow an attacker with arbitrary read and write capabilities to bypass Pointer Authentication.

This issue has been addressed in the latest versions of macOS Ventura (13.1), watchOS (9.2), iOS (16.2), iPadOS (16.2), and tvOS (16.2).

Who is affected

The vulnerability impacts a range of Apple products, particularly those running older versions of iOS and iPadOS.

Users of macOS Ventura, watchOS, iOS, iPadOS, and tvOS prior to the patched versions are at risk.

• macOS Ventura users
• iOS users, especially those on versions prior to 15.7.1
• iPadOS users
• watchOS and tvOS users

What to do

It is crucial for users and administrators to update their devices to the latest versions to mitigate the risk associated with this vulnerability. Regularly applying updates can help protect against potential exploits.

Monitor security advisories from Apple for any further developments or additional vulnerabilities.

• Update to macOS Ventura 13.1, watchOS 9.2, iOS 16.2, iPadOS 16.2, and tvOS 16.2.
• Review security settings related to Pointer Authentication.
• Stay informed about future patches and security updates from Apple.