Years-old iPhone and iPad Mail app bug puts millions of devices at risk

Apple is to fix a security bug with the Mail app of its iPhone and iPad software, iOS, which has existed for years.

The bug was discovered by ZecOps, a San Francisco-based mobile security forensics company, while investigating an attack against a client that took place in late 2019.

Read More:

Apple has acknowledged the bug and says it will be fixed with the next iOS software update.

ZecOps wrote on its website how the vulnerability, which has existed since iOS 6 of 2012 and is likely present on hundreds of millions of iPhones and iPads the world over, could allow attackers access to a victim's phone without physical contact.

The bug is exploited by attackers sending an email that, although small in size, is composed in such a way that it consumes a large amount of the iOS device's RAM. If it uses up enough RAM, the Mail app will crash, forcing the device to reboot.

This crash and reboot then gives attackers access to email inboxes and other areas of the iPhone or iPad, including photos and contact details.

The bug also affects the iPad GearBrain

Unlike most other cyberattacks, the vulnerability does not require the target to download an email attachment, or click on a link. Merely opening the email - or even by having the Mail app running in the background on devices running iOS 13 - is enough for the attack to take place.

ZecOps ..

Support the originator by clicking the read the rest link below.