How to Patch Out-of-Bound Vulnerabilities in Older iPhone Models

On Aug 31th, tech giant Apple rolled out security updates for their older iPhone models to fix a out-of-bound vulnerability in older iPhone models. Apple didn’t disclose the technical details about the flaw to avoid the exploitation of the vulnerability. Let’s explore what Apple has shared about the vulnerability in its security advisory.

Out-of-Bound Vulnerability in Older iPhone Models

If you missed the recent security update by Apple, Apple disclosed two vulnerabilities in its recent security update in that it disclosed two vulnerabilities which were being tracked as CVE-2022-32893 and CVE-2022-32894 are out-of-bound vulnerabilities in WebKit and kernel of Apple platforms: iOS, iPadOS, and macOS. There after Apple responded those vulnerabilities by releasing iOS v15.6.1, iPadOS 15.6.1, and macOS Monterey 12.5.1 to fix these flaws.

Apple has released a new security advisory on the same vulnerabilities again on Aug 31th. As per the report, these recently disclosed vulnerabilities are now again being targeted by hackers, but this time on the older iPhone models. Apple also rings an alarm with a statement “These vulnerabilities are now actively being exploited in the wild.”

To recall.

CVE-2022-32893:

It is an out-of-bound write issue in WebKit that allows attackers to carry out arbitrary code execution with maliciously crafted web content.

CVE-2022-32894:

It is an out-of-bound issue in Kennel that allows attackers to execute arbitrary code with kernel privileges using a malicious or vulnerable application.

iPhone Models Vulnerable to the Out-of-Bound Vulnerability:

Apple says that iPhone models iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation) are vulnerable only to CVE-2022-32893 (out-of-bound vulnerabilities in WebKit). Moreover, Apple left a note to its users that all these older models are not affected by CVE-2022-32894 (out-of-bound vulnerabilities in Kerned).

Since the flaw is actively actively being exploited in the wild it is recommended to upgrade the patch to fix the out-of-bound vulnerabilities in Older iPhone models.

How to Patch The Out-of-Bound Vulnerability in Older iPhone Models?

Apple released security updates in that it says it has released iOS v12.5.6 to fix the flaw. We recommend all the users of iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation) upgrade their OS to the latest release (v12.5.6 at the time of publishing this post). Please visit the Apple security updates page to read information about all the recently released security updates. 

How to Update iOS and iPadOS?

Follow the procedure shone in this picture to update iOS and iPadOS:

Go to Settings > General > Software Update > Click on Download and Install Updates.

https://www.instagram.com/thesecmaster/We hope this post would help you know how to patch out-of-bound vulnerability in Older iPhone models. Please share this post if you find this interested. Visit our social media page on Facebook, LinkedIn, Twitter, Telegram, Tumblr, Medium & Instagram, and subscribe to receive updates like this.