Shulou(Shulou.com)11/24 Report--

CTOnews.com, Feb. 1-A security flaw in Apple's unauthorized tracking of the location of iPhone users appears to have been fixed.

Earlier, Apple released to the public the official versions of iOS 16.3 and iPadOS 16.3, which included a list of security fixes, this time with content labeled CVE-2023-23503.

This CVE is listed under Apple Maps and has not yet been publicly released, but the number has been retained for release. CTOnews.com learned that Apple's release notes said that "applications may bypass privacy preferences" and that "logical issues have been solved by improving state management."

The vulnerability seems to allow location tracking, regardless of user preferences, and at least one company has exploited it, according to blogger Rodrigo Ghedin.

A reader of the Ghedin blog found that iFood, a Brazilian company, was monitoring his location. I don't know if it was intentional. The reader sets iFood to never track locations, but the company seems to be able to break that.

The user, who was using iOS 16..2, reset the iPhone phone and updated it immediately after the release of iOS 16.3.

It is not clear whether the problem was resolved by a reset or update, but the user reported that iFood was untraceable. Ghedin said it contacted iFood, but they have not issued a statement.

The official version of iOS 16.3 was released in January this year, with iCloud advanced data protection, Apple ID security keys, and other enhancements to iPhone, bug fixes, and security updates.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.