“Our response research on the format string flaw revealed that the vulnerability is not only restricted to the iOS operating system,” states Shulman. “It also has the potential to affect the macOS operating system used by many corporations for employee stations.”

“The nature of format string vulnerabilities is that when carefully crafted they can be used to write arbitrary code into random, or chosen, parts of a machine’s memory – and even eventually inject and execute code,” Shulman explains. “Since it is possible for the vulnerable iOS and macOS devices to be connected to the larger corporate network, this code can eventually be used for lateral movement even if it only stemmed from an employee accidentally joining an unknown SSID. Once the malicious code has infiltrated a device on the network, it can exploit corporate data without the need to ‘access the network first’ in the typical ways.”

https://www.forbes.com/sites/gordonk...h=63ed203754ae

Great….

Wow.. so what I’m getting out of it is do not connect to wifi (other than home)?

Inb4 every iPhone user on earth and every Mac os user has their data ransomwared

Unsurprising. Apple is no better then android for security, it's a giant meme that they care about your privacy.