According to Apple, a new update for older model Apple devices removes some code from the ASN.1 decoder, which was causing a memory corruption issue that could be exploited by “processing a maliciously crafted certificate.”
Apple
This means that someone could use or alter a set of user credentials in order to trick the system into running other commands, like opening or downloading malicious content without the user's knowledge or consent.
Comment