Apple released iOS 18.4.1, iPadOS 18.4.1,macOS Sequoia15.4.1, tvOS 18.4.1 and visionOS 2.4.1 updates includefor two major vulnerabilitiesfix, which means all users should install new software as soon as possible. Apple said it has been informed that the vulnerabilities may have been widely exploited and that the security vulnerabilities could be used for "extremely sophisticated attacks against specific target users."
One of the issues, affecting CoreAudio, involves maliciously crafted audio files. Handling audio streams in media files may lead to code execution. Apple has fixed the memory corruption issue with improved bounds checking.
Another vulnerability affects the pointer authentication code, allowing an attacker with arbitrary read and write permissions to bypass the pointer authentication functionality that prevents memory tampering. Apple removed the vulnerable code to prevent the flaw from being exploited.
All updates are now available and focus primarily on security fixes. iOS 18.4.1 also resolves an issue that may cause wireless CarPlay to not work properly in some vehicles.