Apple Patches iMessage Group Chat Privacy Flaws

Apple released security updates addressing multiple vulnerabilities in iMessage group chats. A remote authorization flaw could let attackers join conversations and access incoming messages; another allows newly added group members to view pre-existing messages. The patches also fix an out-of-bounds write vulnerability in Google’s Brotli compression library that could corrupt memory.

The updates include fixes for several Bluetooth and AirPlay flaws. Some could enable malicious Bluetooth devices to pair without user interaction, while others allow attackers to bypass pairing code attempt restrictions or corrupt memory from within Bluetooth range.

Apple omitted key disclosures: whether the flaws have been actively exploited, what technical prerequisites attackers need, and whether older devices remain vulnerable. Some older hardware models don’t list these fixes in their security notes, and the company provided no interim workarounds for immediate protection.