Enhanced Security Measures in iOS 17.4.1 and macOS 14.4.1

iOS 17.4.1 and macOS 14.4.1 have been released for all users following the major iOS 17.4/macOS 14.4 updates. Apple has now disclosed the crucial security patches included in the latest updates for iPhone, Mac, and other devices.

iOS 17.4.1 was initially launched with general release notes, but Apple has now provided detailed security information on its website. The same two vulnerability fixes are included in macOS 14.4.1, which was also released recently.

Understanding the iOS 17.4.1 and macOS 14.4.1 Security Updates

• A security patch for CoreMedia addressing an issue that could potentially result in arbitrary code execution
• A WebRTC flaw patch that also addresses a vulnerability leading to arbitrary code execution

These vulnerabilities were not known to have been exploited previously. The same patches are applicable to macOS Ventura 13.6.6, iOS 16.7.7, and visionOS 1.1.1.

While iOS 17.4.1 doesn’t bring any user-facing upgrades or significant bug fixes, macOS 14.4.1 resolves issues related to USB hubs, Java-based applications, and more.

Below are the detailed release notes for the iOS 17.4.1 security updates:

CoreMedia

Available for various Apple devices, including iPhone XS and later models, different iPad Pro versions, iPad Air, iPad, and iPad mini

Impact: An issue related to image processing that could lead to arbitrary code execution

Description: The update addresses an out-of-bounds write problem by enhancing input validation

CVE-2024-1580: Identified by Nick Galloway from Google Project Zero

WebRTC

Similar to CoreMedia, this update is available for several Apple devices

Impact: A vulnerability in image processing that may lead to arbitrary code execution

Description: The issue of out-of-bounds write has been resolved through improved input validation

CVE-2024-1580: Also discovered by Nick Galloway of Google Project Zero