‘Remote attacker…’: Centre issues warning on Apple iOS & Ipad OS

The Centre on Wednesday warned users of Apple iOs and iPadOS against multiple vulnerabilities in the two operating systems which could help a remote attacker gain access to sensitive information, execute arbitrary code , spoof interface address or deny service conditions on the targeted systems.

The Indian Computer Emergency Response Team (CERT-IN) a nodal agency under the ministry of electronics and information technology, said the vulnerabilities existed in Apple iOS and iPadOS due to improper security restrictions in AppleMobileFileIntegrity component, improper bounds check in AVEVideoEncoder component, improper validation in CFNetwork component, improper entitlement in CoreBluetooth component to name a few.

“A remote attacker could exploit these vulnerabilities by persuading a victim to open a specially crafted file or application.