Tech giant Apple released an update for its iOS mobile operating system on Wednesday. The update contains major bug fixes that will patch loopholes and exploits that hackers might use to exploit the system.
More 50 security flaws were patched by the latest update. At least 19 of the flaws allow hackers to remotely and locally execute arbitrary code without the user permission. One notable exploit is related to maliciously-crafted fonts. Another was traced to the CoreMedia Playback framework.
The latest update, iOS 9.2, also fixes the exploit that arises when accessing external disks through the IOKit SCSI and the MobileStorageMounter frameworks.
The update also fixes an exploit which can be triggered by forcing the user to access a maliciously-crafted website. These exploits were traced back to arbitrary code execution due to a loophole within OpenGL and WebKit, according to IT News.
Ten loopholes from the WebKit rendering engine, which is employed by the Safari web browser and App Store, were fixed.
The infamous zero-day exploit on the DYLD dynamic linker discovered in August was also patched. The exploit was discovered by Apple and the PanguTeam jailbreakers and found out that it allows malicious applications to abuse several segment validation flaws in order to run restricted arbitrary codes.
According to Tech Report, the iOS 9.2 update will also fix problems related to iOS updates that were reported to disable alarms.
The update will cover Apple iPhone 4S and later models, fifth generation iPod Touch and newer models, as well as the iPad 2 and newer models.