Skip to content

iOS 18.4.1 is here, fixing two big security holes and a CarPlay bug

Apple has just released iOS 18.4.1, and while it doesn’t include any flashy new features, it’s still an important update worth installing ASAP. That’s because it fixes two serious security flaws that Apple says may have been exploited in the wild.

Although these vulnerabilities were part of highly sophisticated attacks targeting specific individuals, it’s still good practice for everyone to update. Even if you’re not likely to be personally targeted, keeping your device secure helps protect your data and ensures you don’t become an easier target later on.

Security fixes

The update patches two separate issues, both of which could allow hackers to take control of your device under very specific conditions.

The first is related to audio files. Apple says that simply playing a maliciously crafted audio stream could allow attackers to run code on your device. The second issue involves a behind-the-scenes security check called pointer authentication, which could be bypassed in specific, quite complicated situations. Apple says it’s dealt with the problem by removing the vulnerable code entirely.

In both cases, the company notes that these flaws were likely exploited in real-world attacks, albeit against “specific targeted individuals.” That’s often code for journalists, activists, or people of political interest – but these kinds of exploits can sometimes trickle down into broader attacks if left unpatched.

Also: a CarPlay fix

Outside of security, iOS 18.4.1 includes a minor bug fix for wireless CarPlay. If you’ve had trouble getting your iPhone to connect to your car without a cable, this update might resolve that.

How to update to iOS 18.4

Even if Automatic Updates is enabled, it’s usually quicker to manually update. Simply head to Settings > General > Software Update to ensure you’re running the latest version.