iOS 18.3.2 and iPadOS 18.3.2
Juli Clover (no iOS/iPadOS release notes, security, no enterprise, no developer):
According to Apple’s release notes, the iOS 18.3.2 update adds important bug fixes and security updates. On some devices, it fixes an issue that could prevent playback of some streaming content.
Previously:
Update (2025-03-12): Juli Clover:
After installing iOS 18.3.2, iPhone users have noticed that Apple Intelligence is automatically turned on, regardless of whether it was turned off prior to the update being installed. There is an Apple Intelligence splash screen that comes up after updating, and there is no option other than tapping “Continue,” which turns on Apple Intelligence.
If you’ve updated to iOS 18.3.2 and do not want Apple Intelligence enabled, you will need to go the Settings app, tap on Apple Intelligence , and then toggle it off. When Apple Intelligence is enabled, it consumes up to 7GB of storage space for local AI models, which is an inconvenience when storage space is limited.
iOS 18.3.2 switched on Apple Intelligence against our wishes without permission or notification.
Lorenzo Franceschi-Bicchierai (tweet):
In February, Apple used the same language — “an extremely sophisticated attack against specific targeted individuals” — for another bug, but there is no evidence the two attacks are connected. Before that February patch, Apple had never used this wording before.
Apple identifies this latest vulnerability as CVE-2025-24201. Apple filing a CVE is unusual, as the company typically only acknowledges external researchers and organizations while remaining silent about vulnerabilities discovered internally.
I spent some time trying to piece together what may have taken place.
[…]
I suspect that Apple would have quietly integrated this fix into its next set of updates, except that it also affected Google Chrome. That required going public and filing a CVE, and once that had happened, Apple had no choice but to release these updates immediately to ensure that its current operating systems weren’t vulnerable.
Previously: