AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks

Researchers have discovered six security vulnerabilities in AirDrop and Quick Share, features that enable wireless file transfer between nearby devices. These flaws can be exploited by an attacker in close proximity, using just a laptop and without any prior connection to the target device. The vulnerabilities allow an attacker to crash the sharing service on a Mac or iPhone that is set to receive files from anyone, without requiring any interaction from the user. The research also identified vulnerabilities in Quick Share, although details of these specific flaws are not specified. An attacker can exploit these flaws without being connected to the same network as the target device. The vulnerabilities can be triggered by an attacker within wireless range of the target device.