iOS 18.4.1: What changes in security for iPhone and iPad users

April 21, 2025

Apple released iOS 18.4.1 and iPadOS 18.4.1 on April 16, 2025, focusing primarily on critical security fixes and bug fixes.

This update is particularly important for iPhone and iPad users, as it addresses two serious vulnerabilities that may have already been exploited in targeted attacks.

The update resolves two zero-day vulnerabilities.

CoreAudio (CVE-2025-31200)
It is possible that the processing of malicious audio files may allow arbitrary code execution. Apple states that this vulnerability may have been exploited in highly sophisticated attacks against specific individuals.
RPAC (CVE-2025-31201)
It allows an attacker with the ability to arbitrarily read and write to bypass Pointer Authentication. This vulnerability too may have been exploited in targeted attacks.

Apple has addressed these vulnerabilities with improved boundary checking and removal of vulnerable code.

The update also fixes a rare problem that prevented CarPlay wireless from connecting in some vehicles. While some users report that the problem remains in certain car models, Apple has acknowledged and addressed the issue.

The update is available for.

iPhone XS and later models
iPad Pro 13″, iPad Pro 12.9″ (3rd generation and newer)
iPad Pro 11″ (1st generation and newer)
iPad Air (3rd generation and newer)
iPad (7th generation and newer)
iPad mini (5th generation and newer)

Apple recommends installing the update immediately to protect against potential threats. You can install it by going to Settings > General > Software Update.