On Monday (26-AUG-2019), Apple has rolled out the iOS 12.4.1 update for its devices. The update is to fix an exploit which allowed the hackers to jailbreak iPhones and install unapproved apps. The flaw has been discovered by the hackers on the iOS 12.4 version which was released last month. Previously the bug was identified by Ned Williamson who is the researcher of Google’s Project Zero and the same has been fixed by Apple via iOS 12.3 for iOS devices. Now again it was reoccured in the 12.4 updates. Using this vulnerability the cyber-security researcher @Pwn20wnd has developed and released a jailbreak tool for the iOS devices.
Apple recognized Ned Williamson and @Pwn20wnd on its support page for their assistance in identifying the flaw.
According to Apple, A malicious application may be able to execute arbitrary code with system privileges. Hence the update of iOS 12.4.1 was rolling out, which provides important security and stability updates, and is recommended for all users. A use after free issue was addressed with improved memory management in this release. The same has been tracked under CVE-2019-8605.
The update is available for all the iOS supported devices like iPhone 5s and later, iPad Air and later, and iPod touch 6th generation and later.
The iOS 12.4.1 update was rolled out globally and it is available over-the-air. iOS device users, can also check from the Settings > General > Software Update Menu. Do update your device as soon as possible.
You can also check all the iOS 12 update Release Notes from Apple here.
