AI Image
Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities
The Hacker News • • technology
Key Points:
- Apple released updates addressing two iMessage vulnerabilities: one allowing remote attackers to join group chats and receive messages, and another permitting new group members to access prior messages.
- The fixes are included in specific updates for iOS and iPadOS 27.2.1 and related watchOS versions, but not in recent updates for iPhone XS, XS Max, XR, iPad (7th gen), or some Apple Watch models.
- Details about exploitation, attacker requirements, visibility to group members, and whether all users must update remain undisclosed by Apple.
- The updates also patch a separate out-of-bounds memory corruption flaw in Google's Brotli compression library (CVE-2026-111497), recently added to CISA’s Known Exploited Vulnerabilities catalog.
- Additionally, all nine updates fix multiple Bluetooth and AirPlay security issues, including vulnerabilities that could allow unauthorized pairing and memory corruption via Bluetooth attacks.
