This HomeKit bug could make your iPhone completely unusable; here are the details

guest · Jan 3, 2022

January 3, 2022

A security researcher has exposed a vulnerability in Apple’s HomeKit platform that could lead to your iPhone (or anyone else with access to your Apple Home setup) becoming unusable. The bug was reported by security researcher Trevor Spiniolas, who detailed in a blog post that name of a HomeKit device being changed to something around 500,000 characters long is what causes the issues…

In the blog post, Spiniolas says that the bug was initially reported to Apple on August 10th, and remains in iOS 15.2. The company allegedly promised to resolve the issue in a security update prior to 2022, but it did not make good on this promise. Apple now says it will revisit the problem in “early 2022,” but Spiniolas is taking matters into his own hands to publicly disclose the information in the meantime.
Click to expand...

Here is the synopsis of the bug, according to Spiniolas’ blog post:

When the name of a HomeKit device is changed to a large string (500,000 characters in testing), any device with an affected iOS version installed that loads the string will be disrupted, even after rebooting. Restoring a device and signing back into the iCloud account linked to the HomeKit device will again trigger the bug.
Click to expand...

So, what’s the outcome if you’re impacted by this? It basically boils down to whether or not you have Home devices enabled in Control Center. As Spiniolas notes, Home devices being enabled in Control Center is the default behavior when a user has access to Home devices.
Click to expand...

doorLock

A persistent denial of service vulnerability affecting iOS 15.2 - iOS 14.7 (and likely through 14.0), triggered via HomeKit

View PDF https://trevorspiniolas.com/doorlock/report.pdf
View on GitHub
Click to expand...

Log in or Sign up

This HomeKit bug could make your iPhone completely unusable; here are the details

guest Guest

Log in or Sign up

This HomeKit bug could make your iPhone completely unusable; here are the details

guest Guest

Useful Searches