Apple backports CoreGraphics zero-day patches to older iPhones

What happened?

​Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in "extremely sophisticated" targeted attacks on iOS devices. [...]

Key details

• Apple backported patches to older iOS devices fixing a zero-day out-of-bounds write in CoreGraphics.
• The vulnerability allows arbitrary code execution via maliciously crafted files processed by CoreGraphics.
• Affected devices include iPhone XS and later, iPad 7th generation and later, iPad Air 4th generation and later, and iPad mini 6th generation and later.
• Meta Product Security researcher discovered the out-of-bounds write bug in CoreGraphics framework.
• Installing the backported patches is strongly advised to block potential attacks on older devices.

Summarised by SecOraLens from BleepingComputer. Always read the original source before acting. How SecOraLens verifies advisories.