Apple Fixes Two Exploited iOS Vulnerabilities
- Apple has rolled out iOS 18.4.1 and iPadOS 18.4.1, critical updates addressing two security vulnerabilities that the company says have been actively exploited.
- The updates target two zero-day vulnerabilities, identified as Koreaudio and RPAC.According to Apple, these flaws could allow attackers to execute arbitrary code and bypass security authentications.
- One vulnerability, tracked as CVE-2025-31200, involves memory corruption triggered by a maliciously crafted multimedia file.
Apple Releases iOS 18.4.1 to Patch Actively Exploited Security Flaws
Table of Contents
- Apple Releases iOS 18.4.1 to Patch Actively Exploited Security Flaws
- iOS 18.4.1: Your Essential Security Update – Frequently Asked Questions
- What is iOS 18.4.1, and why is it vital?
- What devices does iOS 18.4.1 affect?
- What security vulnerabilities does iOS 18.4.1 address?
- What are the names of the vulnerabilities iOS 18.4.1 fixes?
- What could attackers do if they exploited these vulnerabilities?
- What is CVE-2025-31200?
- What is CVE-2025-31201?
- What does “active exploitation” mean in relation to these vulnerabilities?
- How urgently should I update my iPhone or iPad?
- How do I update my iPhone or iPad?
- What was in the previous iOS update, iOS 18.4?
- where can I find more details about this security update?
- Summary of Key Vulnerabilities and Their Impact
By Technology news Desk
Apple has rolled out iOS 18.4.1 and iPadOS 18.4.1, critical updates addressing two security vulnerabilities that the company says have been actively exploited. The updates are available for iPhones and iPads.
Zero-Day Vulnerabilities Addressed
The updates target two zero-day vulnerabilities, identified as Koreaudio and RPAC.According to Apple, these flaws could allow attackers to execute arbitrary code and bypass security authentications.
One vulnerability, tracked as CVE-2025-31200, involves memory corruption triggered by a maliciously crafted multimedia file. Apple and Google’s Threat Analysis teams jointly discovered this flaw.
the second vulnerability, identified as CVE-2025-31201, allows attackers to bypass pointer authentication, gaining arbitrary read and write capabilities. Apple identified this vulnerability.
Active Exploitation Warning
Apple has issued a warning regarding the active exploitation of these vulnerabilities. The company stated that these flaws have been used in “extremely complex attacks against specific individual objectives.”
Users are strongly encouraged to update their devices to iOS 18.4.1 and iPadOS 18.4.1 as soon as possible to mitigate potential risks. The iOS 18.4.1 update arrives just two weeks after iOS 18.4,which addressed 62 vulnerabilities,according to Forbes.
Further details about the security updates can be found on Apple’s security releases page.
iOS 18.4.1: Your Essential Security Update – Frequently Asked Questions
What is iOS 18.4.1, and why is it vital?
iOS 18.4.1 is a critical security update released by Apple for iPhones and iPads. It’s crucial as it addresses vulnerabilities that are actively being exploited by attackers, meaning they are already being used in real-world attacks to compromise devices.
What devices does iOS 18.4.1 affect?
The updates, iOS 18.4.1 and iPadOS 18.4.1, are available for both iPhones and iPads.
What security vulnerabilities does iOS 18.4.1 address?
iOS 18.4.1 addresses two zero-day vulnerabilities. These are security flaws that the vendor (Apple) has only recently become aware of, leaving them vulnerable, hence the term “zero-day.”
What are the names of the vulnerabilities iOS 18.4.1 fixes?
The two vulnerabilities addressed are:
- Koreaudio
- RPAC
What could attackers do if they exploited these vulnerabilities?
According to the provided article, these vulnerabilities could allow attackers to:
- Execute arbitrary code (run thier own malicious programs on your device)
- Bypass security authentications (circumvent security measures designed to protect your data)
What is CVE-2025-31200?
CVE-2025-31200 is a specific vulnerability addressed in iOS 18.4.1. It involves memory corruption triggered by a maliciously crafted multimedia file. This means that a specially designed media file could possibly cause your device to malfunction or allow an attacker to gain control.
This flaw was jointly discovered by Apple and Google’s Threat Analysis teams.
What is CVE-2025-31201?
CVE-2025-31201 is another vulnerability addressed by the update. This flaw allows attackers to bypass pointer authentication, enabling them to gain arbitrary read and write capabilities. In simpler terms,they could potentially read or modify data on your device without your permission.
Apple itself identified this vulnerability.
What does “active exploitation” mean in relation to these vulnerabilities?
When Apple warns of “active exploitation,” it means that attackers are already using these vulnerabilities to attack real users. This makes the update notably urgent.The article states that these flaws have been used in “extremely complex attacks against specific individual objectives.”
How urgently should I update my iPhone or iPad?
You should update your device to iOS 18.4.1 or iPadOS 18.4.1 as soon as possible.Given that Apple has issued a warning about active exploitation,delaying the update leaves your device at risk.
How do I update my iPhone or iPad?
The steps to update your are typically:
- Open the Settings app.
- Tap “General.”
- Tap “Software Update.”
- If an update is available, tap “Download and Install.”
What was in the previous iOS update, iOS 18.4?
According to forbes, the previous update, iOS 18.4,addressed 62 vulnerabilities.
where can I find more details about this security update?
You can find further details on Apple’s security releases page.
Summary of Key Vulnerabilities and Their Impact
| Vulnerability | Description | Potential Impact |
|---|---|---|
| Koreaudio & RPAC (General) | Allows attackers to execute arbitrary code and bypass security authentications. | Full device compromise; unauthorized access to data; malicious software installation. |
| CVE-2025-31200 | Memory corruption via a maliciously crafted multimedia file. | Device malfunction; potential for remote code execution. |
| CVE-2025-31201 | Bypass pointer authentication, gaining arbitrary read and write capabilities. | Unauthorized data access; data modification. |