Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacRumors

macrumors bot
Original poster
Apr 12, 2001
68,460
39,290


In addition to several bug fixes, the iOS 18.0.1 and iPadOS 18.0.1 updates released on Thursday include a few security patches for the iPhone and iPad.

Generic-iOS-18.0.1-Feature-Real-Mock.jpg

In a support document, Apple says iOS 18.0.1 and iPadOS 18.0.1 address security vulnerabilities involving the built-in Messages and Passwords apps.

Here are the full details from Apple:

Media Session
Available for: iPhone 16 (all models)

Impact: Audio messages in Messages may be able to capture a few seconds of audio before the microphone indicator is activated

Description: This issue was addressed with improved checks.

CVE-2024-44207: Michael Jimenez and an anonymous researcher

Passwords
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later

Impact: A user's saved passwords may be read aloud by VoiceOver

Description: A logic issue was addressed with improved validation.

CVE-2024-44204: Bistrit Dahal

To install the update, open the Settings app and select General → Software Update.

Article Link: iOS 18.0.1 Includes Security Fixes for Messages and Passwords Apps
 
I don't have VoiceOver set up, so could it actually convey the uppercase and lowercase letters?

47Cr-dP$5 ...
 
“Audio messages in Messages may be able to capture a few seconds of audio before the microphone indicator is activated”

Sorry, what? How is this even possible?
 
  • Like
Reactions: Demonknight
Not so good for me. iPhone 15 Pro Max and iPad mini 6, Siri no longer responds after the initial activation. You have to say “hey siri” or “Siri” again even though the bubble is sitting there waiting.

Trying to send a message through Siri, I can say everything initially but when it’s being read back where I would normally say “send it,” I’m just ignored. So if the messages is wrong, I have to find my phone quickly and manually cancel it on the screen.

I did try disabling then enabling Siri and restarting on both.

Even worse, Safari on the mini keeps freezing. 10 to 20 seconds of sitting there every couple of minutes and it won’t let me open and expand the tab view on the left.

My iPad mini is now very noticeably slow, everywhere. Performance wise I feel like I’m on an iPad mini 4 or 5. From voice dictation to Safari to simply moving the home screen to the next page to see more apps, it’s just slower and not usable. I haven’t had the time to look at my iPhone yet and compare.

A few other new issues for me as well but I’ll leave them for later (Bluetooth speaker plays at max volume for a second when you activate Siri, etc…).
 
Last edited:
Even worse, Safari on the mini keeps freezing.
Safari on my ninth generation iPad is also misbehaving, as in random lockups, refuses to display the tab bar to switch tabs, opening pages in the wrong screen size, dialog boxes disappearing, etc.

Non-Safari programs seem to be working. I can't speak to Messages, I deleted it long ago.
 
  • Like
Reactions: strongma and stx66
Podcasts still borked. App shows the “next show“ as randomly played. Being like that since 18.0, bizarrely this bug was not present in the beta.
 
“Audio messages in Messages may be able to capture a few seconds of audio before the microphone indicator is activated”

Sorry, what? How is this even possible?
Right? Didn’t they make a fuss about how now there’s a separate chip dedicated to making sure that microphone and camera lights are turned with the respective device, outside of the OS to prevent exactly this sort of thing?
 
Still can't see my iCloud emails on my iPhone. Says can't connect to the server. Have to use Safari and go to the iCloud website to check my emails.
 
This update actually fixed my iPhone 16 Pro Max’s touch issues. Relieved they got it out fairly quick.
 
Reading out password is quite a big vulnerability. Glad to see that it is fixed.
 
  • Like
Reactions: mganu
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.