Skip to content
NewA calmer, faster ZeroHour

SiriSpy flaw allows eavesdropping on users' conversations with Siri

Security Affairsby @securityaffairs ()3 min read1
Analyze CVE-2022-32946 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-32946
This issue was addressed with improved entitlements
5.5<1%

From the original article

3 min read at securityaffairs.com

SiriSpy is a vulnerability affecting Apple iOS and macOS that allowed apps to eavesdrop on users’ conversations with Siri. SiriSpy is a now-patched vulnerability, tracked as CVE-2022-32946, in Apple’s iOS and macOS that could have potentially allowed any app with access to Bluetooth to eavesdrop on conversations with Siri and audio. “An app may be able to record audio using a pair of connected AirPods.”

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.