Shulou(Shulou.com)11/24 Report--

CTOnews.com May 23, Jamf threat Lab recently released a blog post sharing ColdInvite vulnerabilities on iPhone, allowing attackers to exploit known ColdIntro vulnerabilities in iOS systems.

Security researcher 08tc3wbb found some "interesting and mysterious" information when analyzing the ColdIntro vulnerability (tracking number CVE-2022-32894, which Apple fixed last year), and finally discovered the ColdInvite vulnerability (tracking number CVE-2023-27930).

Apple released an update to iOS 15.6.1 last year to fix the ColdIntro vulnerability. The ColdIntro vulnerability is the introduction of malicious code from the display coprocessor (DCP) to the AP kernel; the ColdInvite vulnerability discovered this time allows an attacker to bypass DCP and enter the AP kernel directly.

Although an attacker cannot take over the device completely by exploiting ColdIntro and ColdInvite vulnerabilities, he can use the coprocessor to gain read / write access to the kernel, thus invading the device to produce more destructive power.

CTOnews.com attached a list of affected Apple products as follows:

ColdIntro: iPhone 6s and newer models, iPad Pro (all models), iPad Air 2 and newer models, iPad Generation 5 and newer models, iPad mini 4 and newer models, and iPod touch (Generation 7) with iOS 15.6 (and older iOS) installed.

ColdInvite:iPhone 12 (and subsequent models) with iOS versions 14 to 16.4.1 installed.

The iOS / iPadOS 16.5 update released by Apple has fixed the ColdInvite vulnerability (tracking number CVE-2023-27930). It is recommended that users upgrade as soon as possible.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.