Apple releases iOS 14.4.1, iPadOS 14.4.1 update with important security fix
Apple's latest software update for iPhones and iPads fixes a vulnerability in WebKit.
Apple has rolled out a new software update for iPhones and iPads. iOS 14.4.1 and iPad OS 14.4.1 are a minor one but contains an important security fix. This update is available for all compatible iPhones.
iPhone and iPad users can install the new update by going to Settings > General > Software update. It's available for iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation). The release notes for iOS 14.4.1 and iPad OS 14.4.1 just state “This update provides important security updates and is recommended for all users.” But the Apple security webpage has more details about this update, as spotted by 9to5Mac.
This update fixes a vulnerability in WebKit, the browser engine used by Safari and third-party browsers on iOS. Apple's security page explains the vulnerability -
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A memory corruption issue was addressed with improved validation.
CVE-2021-1844: Clément Lecigne of Google's Threat Analysis Group, Alison Huffman of Microsoft Browser Vulnerability Research
This is the second iOS update with security fixes that Apple rolled out this year. Earlier in January, it patched three vulnerabilities that could have allowed attackers to remotely hack devices. Out of the three, two of them were found in WebKit which was explained as “a remote attacker may be able to cause arbitrary code execution.”
Apple is also planning a new iOS 14 update that is slated to release soon. iOS 14.5 will come with slight UI tweaks, and new features as well.