iOS 13 Bug Gives Third-Party Keyboards “Full Access” Permissions

From securityweek.com

Apple iOS keyboard

An update that Apple will soon release for iOS 13 and iPadOS should resolve an issue that leads to third-party keyboard apps getting elevated permissions without the user’s approval.

In an advisory released on September 24 — first spotted by TechCrunch — Apple informed customers that it’s working on an update that should fix the issue.

The company explained that third-party keyboard extensions can run completely standalone and not access any external services, or they can request “full access” permissions, which enables them to provide extra features by connecting to a remote server.

Read more…