iOS 15.0.2 released, fixes zero-day vulnerabilities and 'bugs saved photos disappear from messages'



Apple is, for the iPhone OS ' iOS 15 release want is the second minor update of OS' iPadOS 15 'for iPad and' and 'iOS 15.0.2,' 'iPadOS 15.0.2' in 2021 October 12 bottom. This minor update contains a fix for a zero-day vulnerability that could allow a malicious app to corrupt memory and execute arbitrary code.

About the security content of iOS 15.0.2 and iPadOS 15.0.2 --Apple Support
https://support.apple.com/en-us/HT212846

Apple releasing iOS 15.0.2 with fixes for AirTag, MagSafe, and more --9to5Mac
https://9to5mac.com/2021/10/11/ios-15-0-2-release-bug-fixes-features/


iOS 15.0.2 released, fixes bug that secretly deleted user photos, and more
https://www.xda-developers.com/ios-15-0-2-released-fixes-bug-that-secretly-deleted-user-photos-and-more/

The following points were mainly fixed in iOS 15.0.2 (build number: 19A404).

-A zero-day vulnerability that allows arbitrary code to be executed by giving high privileges to the kernel by memory corruption.
-A bug that the photo saved in the library is deleted from the message when the related thread or message is deleted.
-MagSafe compatible iPhone leather wallet may not be able to access 'Search for items' in the 'Search' function.
-AirTag may not be displayed on the 'Find Item' tab of the 'Find' function.
-CarPlay may not be able to open the audio application or may be disconnected during playback.
-The problem that the English (US) layout may be mistakenly used for the external keyboard of the Japanese layout on the iPad.
・ When using Finder or iTunes on iPhone 13 or iPad mini (6th generation), device restoration or update may fail.

Of these, the zero-day vulnerability ' CVE-2021-30883 ' that can execute arbitrary code is related to IOMobileFrameBuffer, and there is a possibility that memory corruption will occur due to a problem with memory processing and arbitrary code can be executed with kernel privileges. There is. It has already been reported that it has been abused, and it has been fixed in iOS 15.0.2 this time.

Also, the bug that the saved photo is deleted from the message is that if you save the photo from the message thread and then delete the thread, the photo will also be deleted when you perform iCloud backup, this time Officially supported in iOS 15.0.2. However, this bug has also been reported in the public beta version of iOS 15.1 Beta 2, but iOS 15.1 Beta 2 has not yet been fixed.



In addition, there are reports of touch screen responsiveness problems in iOS 15 on Internet bulletin boards Reddit and Twitter, but it is an article whether this touch screen responsiveness has been fixed in iOS 15.0.2. Unknown at the time of creation.



It's also unclear if the iPhone 13 Pro's ProMotion display fixes a bug that limits the refresh rate to 60Hz only in third-party apps.

120Hz compatible iPhone 13 Pro has a bug that refresh rate is limited to 60Hz only for third party apps --GIGAZINE

in Mobile,   Software,   Security, Posted by log1i_yk