Apple releases iOS 12.5.6 update for older iPhones / iPads / iPods, fixes critical vulnerabilities

Apple today released the iOS 12.5.6 (internal version number: 16H71) update for older iPhones, a security update and bug fix for devices that cannot be updated to iOS 15.

This is Apple's first update to iOS 12 since September 2021, when Apple fixed an issue that allowed maliciously crafted PDFs, Web content, and apps to execute code. The latest update addresses vulnerabilities that have been patched in iOS 15 since the last update.

Apple will provide periodic updates for older iPhones, iPads and iPods that cannot be updated beyond iOS 12. These updates will not provide any major feature changes or UI improvements, but will provide protection against known attacks to which older devices may be vulnerable.

Apple's Security Update website states the following.

CVE-2022-32893 submitted by an anonymous researcher.

Update applies to: iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation)

Impact: Maliciously crafted Web content may execute arbitrary code. There have been reports that this issue may have been actively exploited.

Description: The out-of-bounds write issue has been resolved with improved boundary checking.