iPhone text message bug can crash Apple Watch, iPad and Mac too

Bug in Apple’s Messages that allows anyone to crash someone’s iPhone with a text can also affect an Apple Watch, iPad or Mac

The bug that causes iPhones to crash when they receive a boobytrapped text message also affects the Apple Watch, iPads and Macs.

The crash is caused by a bug within a core system common to all of Apple’s devices that handles text. When presented with non-Latin characters in a specific sequence – including those from Arabic, Chinese and Marathi – the CoreText system chokes, causing it to fail and bring the entire operating system to a halt.

Apple told the Guardian that it is aware of the bug and will issue a software update to fix it. How long that update will take is unknown: 24 hours after the bug was revealed, it has not been fixed.

The bug, which was originally identified causing crashes on iPhones, has now been shown to also affect the Apple Watch, causing it to crash when attempting to reply to the offending message via voice using Siri.

The Apple Watch isn’t safe from the boobytrapped text message.

The text message has also caused iPads to crash, and reportedly can affect Mac laptops and desktops too.

“As the issue also affects OS X applications, a malicious party could set the triggering text as a server message of the day or welcome message, causing a user’s terminal to crash when authenticating to network services,” Mathew Hickey, principal security consultant at MDSec told Forbes.

While most people are using the message as a prank to crash friends’ iPhones, experts have not ruled out that the text string could be used for more malicious attacks, with potentially damaging consequences.

Message
This message will cause an iPhone, Apple Watch and many other Apple products to crash. Photograph: Alex Hern/The Guardian

“Programming errors in Unicode decoding and rendering will produce more errors like this, some of which may be exploitable to access elevated privilege levels on devices,” said Ken Simpson chief executive of spam filtering and email security company MailChannels. “Such a vulnerability/exploit is not yet in the wild, but if developed this would represent an immediate and severe threat to all iOS device users worldwide.”

Those wishing to protect themselves from these attacks can turn off the notification system on iOS devices and stop SMS or iMessages being delivered to the Apple Watch.

Mac users are less likely to affected by the bug – sending the string via iMessages did not trigger a crash in the Guardian’s testing – but those using the Terminal app to access resources across the internet should be aware that it could be affected if exposed to the text string.

Apple finally fixes iMessage bug

Wi-Fi hack creates ‘no iOS zone’ that cripples iPhones and iPads

Contributor

Samuel Gibbs

The GuardianTramp

Related Content

Article image
iOS bug lets anyone crash your iPhone with a text message
Glitch causes iOS to choke when certain non-Latin script is sent in a text message, causing the device to crash

Samuel Gibbs

27, May, 2015 @10:56 AM

Article image
iPhone text crash bug hits Twitter and Snapchat
Unfixed iOS bug allows booby-trapped messages to break Snapchat text chat and can be sent via Twitter direct messages or mentions

Samuel Gibbs

29, May, 2015 @10:38 AM

Article image
Apple fixes HomeKit bug that allowed remote unlocking of users' doors
Security flaw in latest iPhone and iPad iOS 11.2 software meant hackers could potentially gain remote control of lights, cameras and locks in smart homes

Samuel Gibbs

08, Dec, 2017 @10:41 AM

Article image
WWDC 2019: Apple unveils new iOS, iPad OS, macOS and Mac Pro
The iTunes app is dead, your iPhone will be faster and the $5,999 Mac Pro becomes firm’s most expensive computer

Samuel Gibbs

03, Jun, 2019 @7:45 PM

Article image
iOS flaw lets hackers access iPhones using an iMessage
Users urged to update their iPhone, iPad, Mac, Apple TV and Apple Watch to prevent attackers taking over devices with malicious images

Samuel Gibbs

22, Jul, 2016 @9:00 AM

Article image
Apple iOS 14: new features coming to iPad and iPhone
Firm announces latest innovations including for iPad and watch at US conference

Samuel Gibbs Consumer technology editor

22, Jun, 2020 @6:46 PM

Article image
Your iPhone's password demands aren't just annoying. They're a security flaw
A developer has warned it is possible to create a phishing attack based on a fake sign-in request for Apple ID credentials

Alex Hern

12, Oct, 2017 @11:17 AM

Article image
'Jailbreak' for iPhones wins $1m bounty
Computer exploit merchant Zerodium says it paid research team that worked out how to ‘jailbreak’ latest version of Apple’s mobile operating system, iOS 9.1.

Alex Hern

03, Nov, 2015 @4:13 PM

Article image
Apple Watch: the fashion verdict
You can choose the size (small), strap (stainless steel) and the clock face (phases of the moon), but what I really liked about the Apple Watch is not having my iPhone in front of my face

Jess Cartner-Morley

28, Apr, 2015 @6:34 PM

Article image
WWDC 2018 keynote: Apple to stop Facebook tracking on iOS 12 – as it happened
Tim Cook and friends kick off ‘dubdub’ in California, with new Apple Watch features, Siri Shortcuts, new Animoji, group FaceTime, ARKit and more

Alex Hern

04, Jun, 2018 @8:37 PM