CVE-2019-25071

Name of the Vulnerable Software and Affected Versions Apple iPhone versions up to 12.4.1

Description A critical issue has been found that affects Siri. It is possible to initiate Siri on the same device by playing an audio or video file, which could allow for remote execution of commands. The existence and implications of this issue are disputed by Apple, despite public demonstrations of the attack.

Recommendations For Apple iPhone versions up to 12.4.1, upgrade to version 13.0 to address this issue. As a temporary workaround, consider restricting the use of Siri on affected devices until the issue is resolved.