Unauthorized Bluetooth pairing & iMessage snooping patched in iOS 27.2.1

Apple's iOS 27.2.1 update released on Monday focused largely on bolstering security. The update addresses several vulnerabilities related to Bluetooth and iMessage. CoreUtils issues in the previous iOS 27.2 version allowed malicious Bluetooth devices to pair with iPhones and circumvent the pairing code limitation without any user involvement.

Apple rectified these two vulnerabilities by implementing improved checks and state management enhancements. Another vulnerability was a use-after-free issue that could enable attackers to corrupt process memory via Bluetooth, which has also been addressed through enhanced memory management. In terms of iMessage, iOS 27.2.1 stops attackers from joining group chats and reading messages sent before their participation.

The update removes vulnerable code and resolves an authorization issue. An App Intents authorization issue that granted apps access to sensitive user data is also patched using improved state management. Other than these, Apple fixed a Brotli out-of-bounds write issue that could lead to memory corruption through improved input validation.

Despite not being as extensive as iOS 27.2, iOS 27.2.1 should be installed by all users due to these crucial security patches.