(Image source from: Simplymac.com)
On Monday, Apple announced the release of the iPadOS 17.7.8 update for its iPad devices. This update follows the iPadOS 17.7.7 firmware, which was introduced only a few days prior but had to be retracted due to multiple issues, notably a problem that prevented users from logging in to their iPads using Touch ID. According to the technology company based in Cupertino, the new update addresses a number of security vulnerabilities identified in earlier versions, which could lead to unexpected shutdowns, unauthorized access to memory content or user data, and denial-of-service scenarios. The iPadOS 17.7.8 update is identified by the build number 21H440 and is compatible with three specific iPad models: the iPad Pro 12.9-inch (2017), the iPad Pro 10.5-inch, and the iPad (2018). This update supersedes the iOS 17.7.7 firmware released last week, which reportedly caused some applications to revert to their original initialization screens and blocked users from logging in using the biometric Touch ID feature.
The release notes indicate that this update includes a fix for a security vulnerability in AirDrop that potentially allowed an application to read arbitrary metadata from files. To remediate this, Apple imposed additional restrictions regarding permissions. Furthermore, the company has resolved a double free issue related to the Audio component by enhancing the checks that led to unanticipated system shutdowns. Apple also identified a flaw in iCloud Document Sharing that could allow an attacker to enable sharing of an iCloud folder without proper authentication, which was rectified through the introduction of more stringent entitlement checks. Additionally, a vulnerability existed that permitted physical access to the Notes app directly from the lock screen, which has been corrected by improving the authentication process.
Several problems were detected within the Kernel that could cause sensitive kernel states to be leaked, unexpected system terminations, memory corruption, or unanticipated application shutdowns. In response, Apple removed the risky code, enhanced memory handling, and improved memory management to solve these issues. Other concerns were identified in areas such as Mail Addressing, Parental Controls, Security, StoreKit, Weather, and WebKit, all of which have now been addressed with the release of the iPadOS 17.7.8 update.
