Apple has released iOS 27.2.1, a critical security update addressing unauthorized Bluetooth pairing and iMessage snooping vulnerabilities. The update, deployed two weeks after iOS 27.2, includes multiple fixes for Bluetooth and iMessage without introducing new features. Notably, it patches CoreUtils flaws that allowed malicious devices to pair with iPhones and bypass pairing code limits without user interaction.
Apple resolved these with improved checks and state management enhancements. The update also fixes a use-after-free Bluetooth vulnerability that enabled process memory corruption, addressed via better memory management. Additionally, iOS 27.2.1 prevents attackers from joining iMessage group chats and reading prior messages, removing vulnerable code and fixing an authorization issue.
An App Intents authorization flaw granting apps access to sensitive data was also patched. A Brotli out-of-bounds write issue leading to memory corruption was resolved through input validation. While lighter than iOS 27.2’s 130+ fixes, Apple urges all users to install this update for improved security.
Source: AppleInsider · Summarized by HeadlinesBriefing