CVE-2022-22588 Resource exhaustion issues are fixed in iOS 15.2.1 and iPadOS 15.2.1.

CVE-2022-22588 Resource exhaustion issues are fixed in iOS 15.2.1 and iPadOS 15.2.1.

This issue is fixed in iOS 15.2.1 and iPadOS 15.2.1. An issue was discovered that could result in unexpected network activity when using HomeKit accessories.

An issue was discovered where some HomeKit accessories were not working as expected. This issue could occur when installing a new version of iOS or when uninstalling an accessory.

An issue was discovered where a maliciously crafted URL sent via SMS or iMessage could result in unexpected network activity. This issue was addressed by disabling iMessage or SMS access to HomeKit accessories. HomeKit now requires user confirmation before enabling access to a new accessory. An issue was discovered where some HomeKit accessories were not working as expected. This issue could occur when installing a new version of iOS or when uninstalling an accessory.

An issue was discovered where a maliciously crafted URL sent via SMS or iMessage could result in unexpected network activity. This issue was addressed by disabling iMessage or SMS access to HomeKit accessories. HomeKit now requires user confirmation before enabling access to a new accessory. An issue was discovered that could cause unexpected behaviour when creating a new HomeKit accessory.

An issue was discovered that could cause unexpected behaviour when creating a new HomeKit accessory. An issue was discovered that could cause unexpected network activity when creating a new HomeKit accessory.

New Features of iOS 15.2.1

- HomeKit now requires user confirmation before enabling access to a new accessory. An issue was discovered that could cause unexpected behaviour when creating a new HomeKit accessory. - Accessory names are now a required field for all accessories in the Home app's accessory list. - A bug fix in which unexpected network activity occurred when using HomeKit accessories

What to do if you are affected by this bug

If you are experiencing unexpected network activity, you can confirm the issue by going to Settings > iCloud > HomeKit. If you believe that an accessory caused this issue, you should reset your accessory by going to Settings > iCloud > HomeKit > Accessories and selecting "Forget This Device".

If you're not sure if this bug affects your device, visit Apple's website for more information about which iOS devices are impacted by this bug.

References

Subscribe to CVE.news
Don’t miss out on the latest issues. Sign up now to get access to the library of members-only issues.
jamie@example.com
Subscribe