Apple iOS and iPadOS Use-After-Free Vulnerability Allowing Arbitrary Code Execution with Kernel Privileges

A use-after-free vulnerability has been identified in Apple iOS and iPadOS. This vulnerability allows an application to execute arbitrary code with kernel privileges. It affects multiple versions of iOS and iPadOS, including iOS 17, iPadOS 17, iOS 15.8.7, and iPadOS 15.8.7. The vulnerability arises from improper memory management, which has been addressed in the latest versions of the operating systems.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code with kernel privileges, potentially allowing an application to bypass system security measures and access sensitive data or system resources.

Remediation

Users are advised to update to the latest version of iOS or iPadOS. For devices that cannot be updated to the latest version, it is recommended to enable Lockdown Mode for enhanced security.