CVE-2021-30882

CVE-2021-30882 is a logic-issue vulnerability in Apple's FaceTime access flow. It could allow an app with microphone permission to unexpectedly access microphone input during a FaceTime call. Affected platforms: watchOS 8, iOS 15, and iPadOS 15; fix/mitigation: patches are in those OS versions. I...

PT-2021-18940 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 8 iOS versions prior to 15 iPadOS versions prior to 15 Description: A logic issue was addressed with improved validation. An application with microphone permission may unexpectedly access microphone input during a...

Apple iPadOS 安全漏洞

Apple iPadOS is a set of operating systems for the iPad tablet computer from the American company Apple Apple. A security vulnerability exists in several Apple products, which stems from a logic problem. Apps with microphone permissions could accidentally access microphone input during FaceTime...

PT-2021-19030 · Apple · Facetime +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.2 iPadOS versions prior to 15.2 Description: The issue concerns the handling of file metadata, which may cause a user in a FaceTime call to unexpectedly leak sensitive user information through Live Photos metadata...

Apple iOS 和 iPadOS 信息泄露漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. An information disclosure vulnerability exists in Apple iOS and iPadOS, which originates from a FaceTime call in which a...

CVE-2021-30992: Undefined Security Weakness

This issue was addressed with improved handling of file metadata. This issue is fixed in iOS 15.2 and iPadOS 15.2. A user in a FaceTime call may unexpectedly leak sensitive user information through Live Photos metadata...

Apple macOS 资源管理错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A resource management error vulnerability exists in macOS, which stems from an internal FaceTime resource management mismatch that results in mute not being turned on when ringing. The following products and...

About the security content of watchOS 7.4

About the security content of watchOS 7.4 This document describes the security content of watchOS 7.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Apple iOS < 12.4.9 Multiple Vulnerabilities

Binary data appleios1249check.nbin...

Google Details Patched Bugs in Signal, FB Messenger, JioChat Apps

In January 2019, a critical flaw was reported in Apple's FaceTime group chats feature that made it possible for users to initiate a FaceTime video call and eavesdrop on targets by adding their own number as a third person in a group chat even before the person on the other end accepted the incomi...

Google Details Patched Bugs in Signal, FB Messenger, JioChat Apps

In January 2019, a critical flaw was reported in Apple's FaceTime group chats feature that made it possible for users to initiate a FaceTime video call and eavesdrop on targets by adding their own number as a third person in a group chat even before the person on the other end accepted the incomi...

The State of State Machines

Posted by Natalie Silvanovich, Project Zero On January 29, 2019, a serious vulnerability was discovered in Group FaceTime which allowed an attacker to call a target and force the call to connect without user interaction from the target, allowing the attacker to listen to the target’s surroundings...

CVE-2020-27929

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.4.9. A user may send video in Group FaceTime calls without knowing that they have done so...

CVE-2020-27929

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.4.9. A user may send video in Group FaceTime calls without knowing that they have done so...

Code injection

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.4.9. A user may send video in Group FaceTime calls without knowing that they have done so...

CVE-2020-27929

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.4.9. A user may send video in Group FaceTime calls without knowing that they have done so...

CVE-2020-27929

CVE-2020-27929 concerns a logic issue in the handling of Group FaceTime calls. The affected component is FaceTime on Apple iOS devices, with the root cause described as a logic/state-management issue that could allow a user to send video in Group FaceTime calls without realizing it. The vulnerabi...

CVE-2020-27929: Undefined Security Weakness

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.4.9. A user may send video in Group FaceTime calls without knowing that they have done so...

About the security content of macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

About the security content of iOS 12.4.9 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...