iOS 15.2.1, iPadOS 15.2.1 Released to Fix HomeKit Denial-of-Service Vulnerability

Apple has credited security researcher Trevor Spiniolas for informing about the issue.

Advertisement
By Jagmeet Singh | Updated: 13 January 2022 10:45 IST
Highlights
  • iOS 15.2.1 has been released for all compatible iPhone models
  • The security flaw was made public earlier this month
  • Apple has also fixed bugs related to Messages and CarPlay apps

The vulnerability could cause an iPhone to enter a cycle of crash or freezing

Apple has released iOS 15.2.1 for all compatible iPhone models as a minor update that fixes a known denial-of-service vulnerability existing in HomeKit, which could cause your device to crash or freeze. The latest iOS update also addresses issues related to Messages and third-party CarPlay apps. Alongside iPhone, the Cupertino company has made iPadOS 15.2.1 available to all eligible iPad users with the same security fix related to HomeKit that could lead to an endless loop of crashes or freezing.

iOS 15.2.1, iPadOS 15.2.1: What's new?

According to the security document related to iOS 15.2.1 and iPadOS 15.2.1, the software carries a fix for the issue in which “processing a maliciously crafted HomeKit accessory name may cause a denial of service” and result in crashes and freezing of your device. The issue was brought into notice by security researcher Trevor Spiniolas earlier this month.

Advertisement

The researcher underlined that the bug could affect Apple devices running on at least as far back as iOS 14.7 or iPadOS 14.7. The flaw could be triggered once a HomeKit device with an extensively lengthy name of around 500,000 characters is connected to a vulnerable iPhone or iPad and result in a cycle of crashing and freezing, Spiniolas had said.

At the time, Spiniolas also alleged that Apple had been aware of the issue since August last year and promised to fix the vulnerability before 2022. The iPhone maker has now notably credited the researcher in its security document while detailing the vulnerability that is recorded as CVE-2022-22588.

Aside from the HomeKit flaw, iOS 15.2.1 comes with a bugfix to address an issue that could cause Messages to not load photos sent using an iCloud link. The update also fixes a bug that could restrict third-party CarPlay apps to not respond to input.

The iPadOS 15.2.1 update also carries the bugfix causing Messages to not load photos sent using an iCloud link.

Advertisement

How to download iOS 15.2.1, iPadOS 15.2.1

You can download iOS 15.2.1 or iPadOS 15.2.1 on your device by going to Settings > General > Software Update. The updates are available for all the devices that are running a recent version of iOS 15 or iPadOS 15.


This week on Orbital, the Gadgets 360 podcast, we discuss iPhone 13, new iPad and iPad mini, and Apple Watch Series 7 — and what they mean to the Indian market. Orbital is available on Apple Podcasts, Google Podcasts, Spotify, Amazon Music and wherever you get your podcasts.
Affiliate links may be automatically generated - see our ethics statement for details.
 

Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.

Advertisement
Popular Mobile Brands
  1. These Sony Signature Series Walkman Models Launch With Premium Design
  2. OpenAI Agent Executes Ethereum Transactions From an Unowned Wallet
  3. Microsoft Announces $50 Xbox Nano Controller, Launch Set for Next Month
  4. Samsung Galaxy A38 5G Rear Camera Details Leaked
  5. Samsung Galaxy SmartTag 3 India Launch Timeline Revealed
  6. Oppo Find X10 Series to Debut in India With This Industry-First Camera Unit
  7. CERT-in Warns of Unauthorised Access by AI Agents
  1. OpenAI AI Model Used Another Wallet’s Ethereum Testnet Funds Without Authorisation, Report Says
  2. Samsung Galaxy SmartTag 3 India Launch Timeline Confirmed by Company Executive
  3. CERT-in Issues Critical Warning After AI Agents Broke Into Indian Organisations' Live Systems
  4. Microsoft Announces $50 Xbox Nano Controller, Launch Set for Next Month
  5. Samsung Galaxy A38 5G Rear Camera Specifications Leaked; May Feature Same Sensors as Galaxy A37
  6. Meta’s Muse Spark Open Model Brings 1M-Token Context Window, Agentic AI Workflows to Apple Mac Studio
  7. Oppo Find X10 Pro Max Confirmed to Launch in India as First Phone With a Triple 200-Megapixel Camera System
  8. Ripple Partners With Cross River to Integrate RLUSD Into Core Banking Platforms
  9. Redmi K100 Officially Confirmed to Launch Later This Month; Pre-Orders Begin
  10. YouTube Music Will Now Display Labels for AI-Generated Music Integrated into the Player
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2026. All rights reserved.