Apple warns iPhone users of a critical security vulnerability - Sarmad
Apple issued an urgent warning regarding a security vulnerability exploited in complex attacks and released updates to fix it
Translated by Qiyas from سرمد — Original source
Apple has issued an urgent security warning to some iPhone users regarding a vulnerability that may have been exploited in a “highly sophisticated attack,” according to tech reports.
The company released iOS 18.7.11 on October 26 for iPhone XS, iPhone XS Max, and iPhone XR devices to address the flaw, which could allow attackers to execute malicious code on the device via a specially crafted file designed to exploit the security weakness.
Vulnerability Details
The vulnerability resides in the CoreGraphics component, which is responsible for processing, rendering, and displaying images and visual content on Apple devices. It is tracked under CVE-2026-86950 and involves a flaw that allows data to be written outside its allocated memory space, potentially enabling the execution of malicious code.
Apple stated that the vulnerability “may have been exploited in a highly sophisticated attack targeting specific individuals” on versions of iOS prior to iOS 27. The company explained that it resolved the issue by improving memory boundary verification mechanisms, following a report from Meta’s Product Security team.
The update also fixes two additional vulnerabilities:
– Camera Access: One of them could allow a malicious app to use the camera without the user’s permission.
– Information Disclosure: The other could lead to the leakage of sensitive data. Apple has not confirmed that these two vulnerabilities were exploited in actual attacks.
In a related development, security researchers at Calif.io pointed out the possibility of causing memory corruption using a PDF file containing a specially crafted font designed to exploit the flaw. Their analysis raised the possibility of a connection to WhatsApp, but did not prove that the app was used in actual attacks or explain how they were carried out.
Apple also released iPadOS 18.7.11 for the seventh-generation iPad.
How to Install the Update
Apple advises users of affected devices to install the latest compatible update as soon as possible by following these steps:
Open “Settings,” then select “General.” Tap “Software Update” to check for available updates. Select “Download and Install,” then follow the on-screen instructions. After installation is complete, verify that the new version has been installed.
It is advisable to back up data before updating, while connecting the phone to a charger and a Wi-Fi network.
The available version may vary depending on the phone model; therefore, Apple recommends installing the latest compatible update shown in the device settings rather than searching for a specific version.
Users can enable automatic updates through the software update settings to ensure that future security patches are installed when available.
