Apple recently released iOS 17.1.2 and iPadOS 17.1.2 with important security updates. The update addresses vulnerabilities in the WebKit engine, a component responsible for processing web content. These vulnerabilities could lead to the disclosure of sensitive information and arbitrary code execution. Apple is aware of reports that these issues may have been exploited in earlier iOS versions.
In particular, the update addresses an out-of-bounds read vulnerability and a memory corruption vulnerability in WebKit. The improvements include enhanced input validation and locking mechanisms to prevent potential exploitation. The impact of these vulnerabilities spans various Apple devices, including iPhone XS and later, iPad Pro, iPad Air, iPad, and iPad mini models from the 2nd generation onward.
As a standard practice, Apple does not disclose security issues until an investigation is complete, and patches are available to ensure customer protection. Users are encouraged to update their devices to the latest iOS and iPadOS versions promptly to safeguard against potential security threats.
CVE-2023-42917 Source Apple.com