Dubai: Cryptocurrency exchange Binance has warned iPhone users about a security vulnerability that could let malicious apps access sensitive information stored by other apps, potentially exposing cryptocurrency wallet credentials.
The vulnerability, known as "worse_query", affects Apple's iOS 26.7.1, 27.0.1, and 27.2, according to a warning Binance issued on Tuesday, November 10.
Get updated faster and for FREE: Download the Gulf News app now - simply click here.
The flaw could allow unauthorised applications to read private files from other apps, including cryptocurrency recovery phrases, private keys, and login credentials.
Binance stressed that the vulnerability affects the iOS operating system and is not limited to its own application.
No cryptocurrency thefts linked to the flaw have been confirmed.
How the iPhone vulnerability works
According to cybersecurity publication BleepingComputer, the vulnerability allows malicious applications to bypass security restrictions designed to prevent apps from accessing each other's private data.
The technique, known as a sandbox escape, could expose information stored locally by cryptocurrency wallets and other applications.
Security researchers have published a proof-of-concept tool called WQ Files that demonstrates how the vulnerability can be exploited.
The tool can reportedly browse, export, modify and delete files belonging to other applications without requiring the iPhone to be jailbroken.
However, an attacker would first need to get the malicious application installed on the device, potentially through…
