Wednesday, September 17, 2025

Hey, remember that Apple iOS fix last month?

It looks like the Bad Guys are attacking older devices as well:

Apple backported a fix to older iPhones and iPads for a serious bug it patched last month – but only after it may have been exploited in what the company calls "extremely sophisticated" attacks.

The latest security update, pushed on Monday, fixes an out-of-bounds write issue tracked as CVE-2025-43300 in the ImageIO framework, which Apple uses to allow applications to read and write image file formats. It's available for iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch 1st generation, and the iThings maker on August 20 patched the same CVE in its newer devices.

Well done to Apple for this.  iPhone 8 was released a long time ago, but they're still supporting it with security fixes.  Bravo. 

Tagged with my Apple Sucks tag because this time they absolutely do not. 

 

3 comments:

Glen Filthie said...

That’s all well and good, BP. But I’m not a computer geek. I go hand to hand with my iPhone - and always lose! Doin it as I try to type this as a matter of fact…😣

What phone should I be on in your opinion? What are you using?

Borepatch said...

Glen,

I think that Apple is much more serious about their customer's privacy than Google is. Apple has repeatedly told governments to get bent when they demand encryption backdoors; Google seemingly couldn't care less.

Also, I think that Apple's update model is superior (it certainly was just a few years ago; I don't get the sense that this is a big area of concern to Google).

Your mileage may vary, void where prohibited, do not remove tag under penalty of law.

- Borepatch

So I use an iPhone. If I wanted to jailbreak it (I don't) then I might prefer Android.

HMS Defiant said...

Thanks for the update. I went and updated my iphone 8 yesterday. I thought it was long out of Apple's update windows.