Apple Releases iOS 15.2.1 to Fix Vulnerability in HomeKit

THE apple is releasing a new update iOS 15.2.1 for the appliances iPhone and iPad compatible. The new update does not bring news and improvements to the system, but fixes a vulnerability the company has identified in the HomeKit protocol, which is responsible for connecting different types of smart home devices.

This novelty, as revealed by the Cupertino giant, does not allow someone else to have access to the device, but allowed malicious people to cause a bug in the system. Through this flaw it was possible to make one of the devices compatible with the HomeKit had its name changed to have more than 500,000 characters, which would result in the iOS have crashes and failures.

This crash happens because the system backup also saves the name of the devices that are connected to the HomeKit, this ends up generating an error with the renamed file and causes the system gets stuck in an infinite loop of failures.

As pointed out by apple via the update information page iOS 15.2.1 for iPhone and iPad, who found this error was the security researcher Trevor Spinolas. He found this vulnerability last year and made a post about it, the researcher also contacted the manufacturer to report the issue.

Aware of the bug, the apple stated that it would resolve the vulnerability before the end of 2021, but some delays ended up pushing the patch to a little later than the beginning of 2022. Spinolas believes the company has addressed this issue inappropriately, as it poses a serious risk to users and many months have passed without a comprehensive fix.”

He also points out that this problem has been present in the company’s system since the iOS 14.7, but also states that it can exist in all versions of iOS 14. now the apple is releasing this update for smartphones higher than iPhone 6s, all models of iPad Pro, iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later and iPod Touch 7th generation.

…..

Thinking about buying a product online? Discover the Save the Connected World extension for Google Chrome. It is free and offers you price comparisons at major stores and coupons so you can always buy at the best price. Download now.

Source: apple, Trevor Spinolas, Engadget

Leave a Reply

Your email address will not be published. Required fields are marked *