CERT-In Warns of Multiple Security Vulnerabilities Affecting Older iPhone, iPad Models: All You Need to Know

Apple fixed two critical security flaws with iOS 16.7.1 — one of these flaws may have been actively exploited on older iOS versions, according to Apple.

Written by David Delima, Edited by Siddharth Suvarna | Updated: 1 November 2023 12:31 IST

CERT-In Warns of Multiple Security Vulnerabilities Affecting Older iPhone, iPad Models: All You Need to Know

iPhone 8 and newer models can download the iOS 16.7.2 update which includes security fixes

Highlights

Apple rolled out updates to its older smartphones last month
iOS 16.7.1 update includes fixes for critical security vulnerabilities
CERT-In has advised users to install Apple's latest security updates

iPhone and iPad owners should update their devices to the latest available versions of iOS and iPadOS, especially older models that were not eligible to receive the latest version of iOS, according to CERT-In — or Indian Computer Emergency Response Team. The nodal security agency tasked with handling cybersecurity threats in the country recently issued a vulnerability note that warns of security flaws affecting some models running on iOS 16.7 or iPadOS 16.7 and older versions and asks users to update their devices.

In its vulnerability note CIVN-2023-0303 issued earlier in October, CERT-In has highlighted security flaws that affected older versions of iOS and iPadOS that were patched by the iPhone maker in an update released last month. According to the agency, the flaws affect versions before iOS 16.7.1 and iPadOS 16.7.1. The company rolled out iOS 17, the latest version of its mobile operating system, back in September. However, older models that were not eligible will remain on iOS 16 and receive occasional security updates.

CERT-In points to Apple's support article that details the security issues patched by the company with the update to iOS 16.7.1 and iPadOS 16.7.1. With the recent update for older devices, Apple fixed a flaw causing improper validation in a kernel component on Apple's operating system. The kernel is a core piece of software that has wide-ranging access and interfaces between the operating system and the device hardware. The flaw may have been actively exploited on older iOS versions, according to Apple.

Samsung Wins Patent for a Tri-Fold Smartphone With Specialised Barrier Layer for Improved Durability

Similarly, Apple also patched a buffer overflow issue that was discovered in a WebRTC (a real time communication protocol used by several web services) component, on the latest iOS 16.7.1 and iPadOS 16.7.1 update. According to the firm, a malicious user could gain elevated privileges on these operating systems and run nefarious code on a victim's device.

Fortunately, it's easy to protect yourself if you are running a slightly older iPhone or iPad. CERT-In points to Apple's support page for the latest iOS 16.7.1 and iPadOS 16.7.1 updates and states that users can update their devices to the latest version to remain safe from the security vulnerabilities.

While CERT-In's advisory covers the security vulnerabilities patched on iOS 16.7.1, Apple has since released iOS 16.7.2 alongside iOS 17.1. These updates arrived on October 25 with fixes for even more flaws related to various system components and apps like Safari, Siri, Find My, Weather, and the iOS kernel.

Here's Why You Need to Update Your iPhone to iOS 16.6.1 Right Away

Owners of the iPhone 8, iPad Air (3rd generation), iPad (5th generation), iPad mini (5th generation) and iPad Pro models that are running on iOS 16 can also manually check for an update on their smartphone or tablet.

How to download the latest iOS update

Connect to a Wi-Fi network and charge your iPhone or iPad to more than 50 per cent.
Tap on General > Software Update in the Settings app.
Wait for the iOS 16.7.2 update to be listed, then tap on Update Now.
Enter your phone's passcode, to begin the update process and wait for your phone to reboot.

Is the Samsung Galaxy Z Flip 5 the best foldable phone you can buy in India right now? We discuss the company's new clamshell-style foldable handset on the latest episode of Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Apple iPhone 8

REVIEW
KEY SPECS
NEWS
Variants

Design
Display
Software
Performance
Battery Life
Camera
Value for Money

Good
Insane performance
Vastly improved cameras
Wireless charging
Assured, timely software updates

Bad
Same old design
First party apps not great in India
Fast charger not bundled

Read detailed Apple iPhone 8 review

Display 4.70-inch

Processor Apple A11 Bionic

Front Camera 7-megapixel

Rear Camera 12-megapixel

RAM 2GB

Storage 64GB

Battery Capacity 1821mAh

OS iOS 11

Resolution 750x1334 pixels

More Apple mobiles Apple mobiles price in India

Choose a variant

Apple iPad Air (2019) Wi-Fi

KEY SPECS
NEWS

Display 10.50-inch

Front Camera 7-megapixel

Resolution 1668x2224 pixels

OS iOS 12

Storage 64GB

Rear Camera 8-megapixel

More Apple Tablets

Apple iPad (2017) Wi-Fi

KEY SPECS
NEWS

Display 9.70-inch

Processor A9

Front Camera 1.2-megapixel

Resolution 2048x1536 pixels

OS iOS 10

Storage 32GB

Rear Camera 8-megapixel

More Apple Tablets

Apple iPad mini (2019) Wi-Fi

REVIEW
KEY SPECS
NEWS

Design
Display
Software
Performance
Battery Life
Camera
Value for Money

Good
Powerful processor
Excellent display
Great form factor
Superb battery life

Bad
Thick bezels
Speakers only on one side
Doesn’t support 2nd-gen Apple Pencil

Read detailed Apple iPad mini (2019) Wi-Fi review

Display 7.90-inch

Front Camera 7-megapixel

Resolution 1536x2048 pixels

OS iOS 12

Storage 64GB

Rear Camera 8-megapixel

More Apple Tablets

Apple iPad Pro (10.5-inch) Wi-Fi

KEY SPECS
NEWS

Display 10.50-inch

Processor Apple A10X Fusion

Front Camera 7-megapixel

Resolution 2224x1668 pixels

OS iOS 10

Storage 64GB

Rear Camera 12-megapixel

More Apple Tablets

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Further reading: CERT-In, iOS 16, iPadOS 16, Security Vulnerabilities, Security Flaws, iOS Update, iOS, Apple

David Delima

Email David Delima

As a writer on technology with Gadgets 360, David Delima is interested in open-source technology, cybersecurity, consumer privacy, and loves to read and write about how the Internet works. David can be contacted via email at DavidD@ndtv.com, on Twitter at @DxDavey, and Mastodon at mstdn.social/@delima. More