Researcher Says Apple Ignored Three Zero-Day Security Vulnerabilities Still Present in iOS 15

In 2019, Apple opened its Security Bounty Program to the public, offering payouts up to $1 million to researchers who share critical iOS, iPadOS, macOS, tvOS, or watchOS security vulnerabilities with Apple, including the techniques used to exploit them. The program is designed to help Apple keep its software platforms as safe as possible.

iPhone 13 Security
In the time since, reports have surfaced indicating that some security researchers are unhappy with the program, and now a security researcher who uses the pseudonym "illusionofchaos" has shared their similarly "frustrating experience."

In a blog post highlighted by Kosta Eleftheriou, the unnamed security researcher said they reported four zero-day vulnerabilities to Apple between March and May of this year, but they said that three of the vulnerabilities are still present in iOS 15 and that one was fixed in iOS 14.7 without Apple giving them any credit.

I want to share my frustrating experience participating in Apple Security Bounty program. I've reported four 0-day vulnerabilities this year between March 10 and May 4, as of now three of them are still present in the latest iOS version (15.0) and one was fixed in 14.7, but Apple decided to cover it up and not list it on the security content page. When I confronted them, they apologized, assured me it happened due to a processing issue and promised to list it on the security content page of the next update. There were three releases since then and they broke their promise each time.

The person said that, last week, they warned Apple that they would make their research public if they didn't receive a response. However, they said Apple ignored the request, leading them to publicly disclose the vulnerabilities.

One of the zero-day vulnerabilities relates to Game Center and allegedly allows any app installed from the App Store to access some user data:

- Apple ID email and full name associated with it

- Apple ID authentication token which allows to access at least one of the endpoints on *.apple.com on behalf of the user

- Complete file system read access to the Core Duet database (contains a list of contacts from Mail, SMS, iMessage, 3rd-party messaging apps and metadata about all user's interaction with these contacts (including timestamps and statistics), also some attachments (like URLs and texts)

- Complete file system read access to the Speed Dial database and the Address Book database including contact pictures and other metadata like creation and modification dates (I've just checked on iOS 15 and this one inaccessible, so that one must have been quietly fixed recently)

The other two zero-day vulnerabilities that are apparently still present in iOS 15, as well as the one patched in iOS 14.7, are also detailed in the blog post.

Apple has not yet commented on the blog post. We'll update this story if the company responds.

Related Roundups: iOS 15, iPadOS 15
Related Forum: iOS 15

Top Rated Comments

turbineseaplane Avatar
3 weeks ago

It seems obvious that Apple's software development process is broken, giving almost everything they release a feeling of being incomplete, unreliable, and unnecessarily rushed. Software will never be perfect, but this kind of problem is an unforced error on Apple's part.
What's so frustrating about this is that it's an "own goal".

Apple alone has insisted on this pointless constant march towards an "all new***" iOS version every year, when literally nobody wants that.

We all want features added over time when they are ready, sure. But more than that, people want things to get more polished, more optimized, faster, smoother, better, more well thought out.

Almost all of that is eliminated by forcing a full new version every year. The cycle of "fixing bugs" and "ironing out issues" never completes and then just restarts every Fall. It. Sucks.

iOS (and macOS) need to be "running releases" that get worked on and made better for a 3-4 year run before totally new versions.

They've made a treadmill for themselves and they can't keep up.
Score: 44 Votes (Like | Disagree)
Soba Avatar
3 weeks ago
It seems obvious that Apple's software development process is broken, giving almost everything they release a feeling of being incomplete, unreliable, and unnecessarily rushed. Software will never be perfect, but this kind of problem is an unforced error on Apple's part.

Apple increasingly looks like a company that is more concerned about image and that is trying to cover up shortcomings through marketing rather than using solid engineering techniques to get the product right.

Tim Cook heads the company and he deserves a lot of flak, but I suspect there are major problems at all levels. Perhaps it's time to clean house.
Score: 41 Votes (Like | Disagree)
GMShadow Avatar
3 weeks ago
Honestly, good for him.

Apple needs to get their stuff together. It's clear the wheels are coming off the cart under Cook the past few years.
Score: 34 Votes (Like | Disagree)
rickwalder Avatar
3 weeks ago
Apple’s stance has always been “without us, you are nothing” to devs

wonder if the day will come that apple realizes without devs, they are nothing. Who wants an iPhone without any apps?
Score: 28 Votes (Like | Disagree)
DesertDrummer Avatar
3 weeks ago
How frustrating. This would be such an easy, valuable PR win for Apple, and it would only increase their security and engagement with the security research community, but they're blowing it. Unfortunately, this is probably a side-effect of Apple's very secretive culture.
Score: 25 Votes (Like | Disagree)
BobSc Avatar
3 weeks ago

Oh really? Is that "clear"? Are the "wheels coming off the cart"?

Because from my perspective, I see the M1 transition blowing minds. I see Swift turning into a major powerhouse. I see Macs making a major comeback in the marketplace beyond any time in the past 20 years. I see Apple counting stacks.

So which "wheels" are these that you're referring to exactly?
The wheels that are coming off aren't the hardware items you mentioned. It's the attitude. I'm been an apple customer since about 1987. I've purchased tens of thousands of dollars of equipment. The wheels started coming off when apple switched to their insane policy of new OS's every year. That's more important to apple than making sure their hardware and software is as bug free as possible. Apple used to have a customer oriented mentality. That's gone. And in fact the wheels are't even on any more. The number of significant bugs in iOS 15 is proof enough. I used to think that apple could do no wrong. I now wonder if they can do much that is right!
Score: 24 Votes (Like | Disagree)

Top Stories

iPhone 13 Security

Apple Apologizes to Researcher for Ignoring iOS Vulnerabilities, Says It's 'Still Investigating'

Monday September 27, 2021 12:55 pm PDT by
Last week, security researcher Denis Tokarev made several zero-day iOS vulnerabilities public after he said that Apple had ignored his reports and had failed to fix the issues for several months. Tokarev today told Motherboard that Apple got in touch after he went public with his complaints and after they saw significant media attention. In an email, Apple apologized for the contact delay...
apple devices security bug bounty mac iphone ipad

Security Researchers Unhappy With Apple's Bug Bounty Program

Thursday September 9, 2021 10:00 am PDT by
Apple offers a bug bounty program that's designed to pay security researchers for discovering and reporting critical bugs in Apple operating systems, but researchers are not happy with how it operates or Apple's payouts in comparison to other major tech companies, reports The Washington Post. In interviews with more than two dozen security researchers, The Washington Post collected a number...
corellium

Apple and Corellium Agree on Settlement to Bring Lawsuit to an End

Tuesday August 10, 2021 11:36 pm PDT by
Apple this week dropped its long-standing lawsuit against Corellium, the security research company that provides security researchers with a replica of the iOS operating system, allowing them to locate possible security exploits within Apple's mobile operating system, The Washington Post reports. Apple filed a lawsuit against Corellium in 2019, claiming the security company was infringing...
General iOS 14

iOS 14.7.1 and macOS Big Sur 11.5.1 Patch Security Vulnerability That May Have Been Actively Exploited

Monday July 26, 2021 11:55 am PDT by
Apple today released unexpected iOS 14.7.1 and iPadOS 14.7.1 updates to the public, and according to a newly released support document, the software addresses a serious security vulnerability that may have been exploited in the wild. Apple says that an application may have been able to execute arbitrary code with kernel privileges due to a memory corruption issue. "Apple is aware of a report ...
f1618938547

AirTag 'Lost Mode' Vulnerability Can Redirect Users to Malicious Websites

Tuesday September 28, 2021 3:47 pm PDT by
The AirTag feature that allows anyone with a smartphone to scan a lost AirTag to locate the contact information of the owner can be abused for phishing scams, according to a new report shared by KrebsOnSecurity. When an AirTag is set in Lost Mode, it generates a URL for https://found.apple.com and it lets the AirTag owner enter a contact phone number or email address. Anyone who scans that...
corellium

Apple Appeals Corellium Copyright Lawsuit Loss After Settling Other Claims

Tuesday August 17, 2021 7:23 pm PDT by
Back in December, Apple lost a copyright lawsuit against security research company Corellium, and today, Apple filed an appeal in that case, reports Reuters. The judge in the copyright case determined that Corellium was operating under fair use terms and that its use of iOS was permissible, throwing out several of Apple's claims. For those unfamiliar with Corellium, the software is designed...
iPhone 13 Face ID

iOS 15 Includes Improved Face ID Anti-Spoofing Models and Other Vulnerability Fixes

Monday September 20, 2021 12:50 pm PDT by
The iOS 15 and iPadOS 15 updates that were released today add improved anti-spoofing models for Face ID, further improving the security of facial recognition on the iPhone X and later and the iPad Pro models. According to Apple's security support document for the updates, there was a Face ID vulnerability that could allow a Face ID iPhone to be unlocked and authenticated using a 3D model...
tim cook privacy

Apple Not Trying Hard Enough to Protect Users Against Surveillance, Researchers Say

Friday July 23, 2021 6:46 am PDT by
Following the news of widespread commercial hacking spyware on targeted iPhones, a large number of security researchers are now saying that Apple could do more to protect its users (via Wired). Earlier this week, it was reported that journalists, lawyers, and human rights activists around the world had been targeted by governments using phone malware made by the surveillance firm NSO Group...
Child Safety Feature Purple

Apple's Proposed Phone-Scanning Child Safety Features 'Invasive, Ineffective, and Dangerous,' Say Cybersecurity Researchers in New Study

Friday October 15, 2021 12:23 am PDT by
More than a dozen prominent cybersecurity experts hit out at Apple on Thursday for relying on "dangerous technology" in its controversial plan to detect child sexual abuse images on iPhones (via The New York Times). The damning criticism came in a new 46-page study by researchers that looked at plans by Apple and the European Union to monitor people's phones for illicit material, and called...
iOS 14 on iPhone feature emergency

Apple Releases iOS 14.8 and iPadOS 14.8 With Security Updates

Monday September 13, 2021 9:57 am PDT by
Apple today released iOS 14.8, marking the eighth major update to the iOS operating system that came out in September 2020. iOS 14.8 comes two months after the release of iOS 14.7, an update that introduced MagSafe Battery Pack support. The iOS 14.8 update can be downloaded for free and the software is available on all eligible devices over-the-air in the Settings app. To access the new...