February 14, 2023, 12:39 pm | Read time: 3 minutes
Two weeks after the release of iOS 16.3, Apple has rolled out an important update that includes security patches and bug fixes. However, not all users should install it immediately.
On Monday, Apple released a security update for the iPhone in the form of iOS 16.3.1. Among other things, it includes a patch for a serious vulnerability that hackers have actively exploited. However, some users are complaining that the update is causing issues on the iPhone.
iOS 16.3.1 Closes Two Security Vulnerabilities
On its support page, Apple has summarized the contents of the iPhone update. It includes patches for two vulnerabilities. The more serious one affects Apple’s browser engine WebKit, which the iOS version of Safari is based on. It allows maliciously crafted web content to execute arbitrary code. In other words, hackers can gain access to the iPhone–for example, through fake websites.
Apple is at least “aware of a report that this issue may have been actively exploited.” This refers to cases where hackers have actually exploited vulnerabilities for attacks. This type of vulnerability differs from those found by security researchers in a controlled environment. According to Apple, a type confusion in the code caused the problem. The company has eliminated the vulnerability, designated CVE-2023-23529, through improved checks.
Another patch is available for the iOS system core, known as the kernel. The patch fixes a so-called use-after-free error (UAF). This occurs when a program leaves a reference to memory after it has been freed. Attackers can use a maliciously developed app to exploit the memory reference to execute their code at the system level. Apple has closed the vulnerability CVE-2023-23514 with “improved memory management.”
According to the release notes, iOS 16.3.1 also includes a number of bug fixes. The update addresses the following issues:
- iCloud settings may not respond or display correctly when apps access iCloud
- Siri requests for “Find My” may not work
- Optimizations for crash detection on iPhone 14 and iPhone 14 Pro models
Update May Cause Issues with Google Photos
On Twitter and Reddit, several users have complained about issues with the Google Photos app for iOS since the new iOS version was released. After the update, the app crashes immediately upon opening and can no longer be used. TECHBOOK installed iOS 16.3.1 to verify the claims. Indeed, the Google Photos app could not be opened on our iPhone 13 mini during testing.
Even if it is likely an error caused by iOS, the responsibility now lies with Google to resolve the issue with its own app update. Users who have already installed iOS 16.3.1 and are experiencing crashes should look for an update for Google Photos in the App Store.
10-Year-Old iPhone Receives iOS Update
Why Apple Is Releasing iOS 18.7.1 Now and Who Should Install It
Should I Install iOS 16.3.1 Immediately?
TECHBOOK usually advises installing security updates on compatible devices as quickly as possible. In this case, however, we explicitly advise iPhone users who use Google Photos against it–at least until there is an app update that resolves the issue.
We recommend the update to all other users, as there is otherwise no protection against an actively exploited vulnerability. The update is available for iPhone 8 and later and comes in the form of iPadOS 16.3.1 for iPad Pro, iPad Air (3rd generation and later), iPad (5th generation and later), and iPad mini (5th generation and later).
Sources
- Apple Support: “Apple security updates” (accessed February 14, 2023)
- 9To5Mac: “PSA: Don’t update to iOS 16.3.1 if you’re a Google Photos user” (accessed February 14, 2023)