Apple says mail app issues pose no immediate risk

Source: Xinhua | 2020-04-25

Apple said on Thursday that the mail app issues found by cybersecurity firm ZecOps are insufficient to bypass security protections and did not pose an immediate risk to users.

Apple said the researcher had identified three issues in Mail, but alone they are insufficient to bypass iPhone and iPad security protections.

"These potential issues will be addressed in a software update soon," Apple said.

San Francisco-based ZecOps said on Wednesday that they had detected two flaws in the iOS and iPadOS Mail app, which allow remote code execution capabilities and enable attackers to remotely infect a device.

"The vulnerabilities exist at least since iOS 6 ... when iPhone 5 was released. The earliest triggers we have observed in the wild were on iOS 11.2.2 in January 2018," ZecOps said.