Advertisment

Apple Introduces iOS 16.6.1 Update with Security Fixes

Apple has fixed two actively exploited vulnerabilities, one in the Wallet framework and the other in the ImageIO framework in iOS 16.6.1, which is a significant security update. By using malicious pictures or attachments, these flaws, according to Citizen Lab, gave attackers the ability to run arbitrary code

author-image
Kapish Khajuria
New Update
ios 16.6.1 update with security fixes

Apple has fixed two actively exploited vulnerabilities, one in the Wallet framework and the other in the ImageIO framework in iOS 16.6.1, which is a significant security update. By using malicious pictures or attachments, these flaws, according to Citizen Lab, gave attackers the ability to run arbitrary code.

Advertisment

Notably, the tech behemoth from California thanks the researchers and advises users to update right once, even though iOS 17 is not expected to add any new features to iOS 16.6.1 when it is unveiled on September 12.

Why there is need to bring Security fix?

The original vulnerability is in the ImageIO framework, which could lead to the risk of arbitrary code execution when manipulating a maliciously crafted image. Another vulnerability is in Wallet, which creates a similar risk of running arbitrary code when opening a maliciously crafted attachment.

Advertisment

To protect your iPhone from these vulnerabilities, it is very important to install the iOS 16.6.1 update quickly.

What was wrong and how did it turn out to be setback for users?

According to a TechCrunch report, Citizen Lab, a research organization specializing in government malware, discovered an actively exploited zero-click vulnerability used to distribute the Pegasus spyware developed by NSO Group. Pegasus is known to have been used by several governments around the world to target individuals such as civil society activists, journalists and members of the opposition.

"The exploit was able to compromise iPhones running the latest version of iOS (16.6) without interaction with the victim,” Citizen Lab said in a blog post. Apple praised the efforts of security researchers who reported security bugs and vulnerabilities. Apple's security updates page acknowledged the assistance provided by The Citizen Lab at the University of Toronto's Munk School.

The iOS 16.6.1 update is currently available for all eligible iPhones and iPads. To start installing this update, go to Settings > General > Software Update. It is important to note that iOS 16.6.1 does not include any new features. The next major update, iOS 17, is expected to be released in September, as mentioned earlier.

Advertisment