{"id":53724,"date":"2025-04-16T21:13:23","date_gmt":"2025-04-16T19:13:23","guid":{"rendered":"https:\/\/www.apfelpatient.de\/?p=53724"},"modified":"2025-04-16T21:14:43","modified_gmt":"2025-04-16T19:14:43","slug":"ios-18-4-1-new-apple-update-closes-two-critical-gaps","status":"publish","type":"post","link":"https:\/\/www.apfelpatient.de\/en\/news\/ios-18-4-1-neues-apple-update-schliesst-zwei-kritische-luecken","title":{"rendered":"iOS 18.4.1: New Apple update closes two critical vulnerabilities"},"content":{"rendered":"

Apple released iOS 18.4.1 today \u2013 an update that's not just a minor bug fix, but closes two actively exploited security vulnerabilities. If you use an iPhone, you should install this update as soon as possible. According to Apple, attackers may have exploited these vulnerabilities to target users. This also applies to iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, and visionOS 2.4.1.<\/strong><\/p>\n\n\n\n

In its security documentation, Apple lists two security vulnerabilities that were closed with iOS 18.4.1 and the accompanying updates. The first affects CoreAudio, a central component for processing audio files. A specially crafted audio file could lead to arbitrary code being executed on your device. This is possible because memory corruption could previously have occurred during processing of this file. Apple resolved the issue through improved boundary checking. The second vulnerability was even more sensitive. It affects the Pointer Authentication Code (PAC) \u2013 a mechanism designed to prevent memory tampering. Attackers who already had read and write permissions on the device were able to bypass this protection. Apple has completely removed the affected code to prevent further abuse.<\/p>\n\n\n\n

Actively exploited in targeted attacks<\/h4>\n\n\n\n

Particularly explosive: Apple itself believes that both vulnerabilities have already been actively exploited \u2013 in highly specialized, targeted attacks against individuals. Apple calls this an "extremely sophisticated attack." As usual, Apple isn't revealing who exactly was affected. But the warning clearly demonstrates the seriousness of the situation.<\/p>\n\n\n\n

More bug fixes in iOS 18.4.1<\/h4>\n\n\n\n

In addition to the security vulnerabilities, iOS 18.4.1 also fixes a specific bug affecting users with wireless CarPlay. In certain vehicle models, the connection could malfunction. This issue should now be resolved. The update doesn't include any other new features or changes \u2013 the focus is clearly on security (via Apple's Safety documentation<\/a>).<\/p>\n\n\n\n