Apple patches a possibly exploited CoreGraphics flaw on older iPhones

[LuckySentinel]

Owners of older iPhones have an important update to install. MacRumors reports that Apple has released security updates for older operating systems, including a fix for a CoreGraphics flaw that may have been exploited in targeted attacks

The flaw meant a maliciously crafted file could lead to arbitrary code execution. Apple said it is aware of a report that the issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27

The fix arrived on Monday 26 October alongside iOS 27.2. iOS 18.7.11 and iPadOS 18.7.11 bring it to the iPhone XS, XS Max, XR and the seventh generation iPad, which cannot run newer software

Apple also released iOS and iPadOS 26.7.2 with 134 security fixes, none listed as exploited, along with updates for macOS Tahoe, macOS Sequoia and tvOS. The tvOS update adds support for the latest Siri Remote on older Apple TV models

No CVE number or attack details have been published, and it is not clear whether this is linked to a separate CoreGraphics fix released in September. It is good to see Apple still protecting devices that are several years old. Anyone with an older iPhone should update as soon as possible

Do you still use an older iPhone? And how long should companies keep providing security updates for old devices?

Apple Fixes Possibly Exploited CoreGraphics Flaw on Older iPhoneswww.macrumors.com

[ContextHarbour]

134 security fixes in iOS 26.7.2 is a huge number. AI assisted bug hunting seems to be finding more problems than ever. Patch notes keep getting longer