# MA-749.102019: MyCERT Alert - Security Update For iOS 12.4.2

**Date:** 03 Oct 2019  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-749.102019  
**Advisory ID:** MA-749.102019

---

**1.0 Introduction**
Apple has released security updates to address vulnerabilities in iOS devices.
|  |  | --- | --- | --- | --- | No. | CVE | Bug Type/Impact | Severity | 1 | CVE-2019-8641 | Attacker may be able to remotely cause unexpected application termination or malicious code execution. | High |
**2.0 Impact**
Exploitation of these vulnerabilities could potentially cause data leak and arbitrary code execution in iMessage which consider as high severity. Some may cause the unpatched devices to terminate running processes or even freeze up.
This is especially dangerous to iOS devices that are not eligible to get iOS 13.1 update where the problem already mitigated.
**3.0 Affected System and Devices**
iOS Devices released in 2014 and earlier that support iOS 12 until iOS 12.4.1 and did not get update to iOS 13.1:
- iPhone 5s, iPhone 6, iPhone 6 Plus.
- iPad Air, iPad mini 2, iPad mini 3.
- iPod touch 6th generation.
**4.0 Recommendations**
We encourage users and administrators that still used iPhone, iPod and iPad that didn’t eligible to receive latest update to iOS 13.1 to review the Apple security updates website and apply the necessary updates:
- Apple security updates: <https://support.apple.com/en-my/HT201222>
- About the security content of iOS 12.4.2: <https://support.apple.com/en-us/HT210590>
To update your iOS devices, please refer:
- Update your iPhone, iPad, or iPod touch: <https://support.apple.com/en-my/HT204204>
Generally, MyCERT advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 - 8008 7000 (Office Hours)
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 -18:00 MYT
Web: <https://www.mycert.org.my>
Twitter: <https://twitter.com/mycert>
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
- Apple security updates: <https://support.apple.com/en-my/HT201222>
- About the security content of iOS 12.4.2: <https://support.apple.com/en-us/HT210590>
- Update your iPhone, iPad, or iPod touch: <https://support.apple.com/en-my/HT204204>
- Google’s Project Zero (CVE-2019-8641): <https://bugs.chromium.org/p/project-zero/issues/detail?id=1881>
- The Fully Remote Attack Surface of the iPhone: <https://googleprojectzero.blogspot.com/2019/08/the-fully-remote-attack-surface-of.html>