iOS 18.4.1, macOS 15.4.1 & Co: Apple delivers emergency patches
The updates are intended to eliminate two zero-day vulnerabilities that were apparently used for targeted attacks. Apple is also addressing a CarPlay problem.
(Image: nikkimeel/Shutterstock.com)
Emergency updates for iPhones, iPads and Macs: Apple has fixed two serious security vulnerabilities in its operating systems with the new versions iOS 18.4.1, iPadOS 18.4.1 and macOS 15.4.1 Sequoia. Users should install the updates immediately.
The vulnerabilities apparently allow attackers to carry out targeted and "extremely sophisticated attacks" on individual iPhone users, as the manufacturer notes with reference to a report. No further details of these attacks were provided. This is usually commercial spyware used by government agencies against targeted individuals.
No updates for older operating systems
The patches are also available for Apple TV boxes and the Vision Pro (visionOS 2.4.1) with tvOS 18.4.1. There are currently no updates for older operating system versions of iOS, iPadOS and macOS and therefore also certain older hardware. Whether these will follow remains to be seen. Apple recently provided security patches for iPadOS 17 and iOS 16 on certain older iPhones and iPads. iOS 17 will apparently not receive any further updates: all iPhones that support iOS 17 can also update to iOS 18.
A memory management vulnerability in CoreAudio allowed code to be executed when playing an audio stream using a manipulated media file. The vulnerability CVE-2025-31200 was apparently discovered by security researchers from Apple and Google. The second vulnerability, which allowed attackers with read and write access to bypass the Pointer Authentication Codes security technology integrated in Apple chips and thus execute arbitrary code, appears to be even more sensitive. The problem has been resolved by removing the faulty code, Apple writes.
Videos by heise
iPhone fix for Wireless CarPlay
In addition to the important patches, iOS 18.4.1 is also intended to eliminate a bug on iPhones that interfered with the connection to wireless CarPlay infotainment systems in certain vehicle models. According to Apple, the error only occurred rarely.
Empfohlener redaktioneller Inhalt
Mit Ihrer Zustimmung wird hier ein externer Preisvergleich (heise Preisvergleich) geladen.
Ich bin damit einverstanden, dass mir externe Inhalte angezeigt werden. Damit können personenbezogene Daten an Drittplattformen (heise Preisvergleich) übermittelt werden. Mehr dazu in unserer Datenschutzerklärung.
(lbe)
