Latest iOS 14.7 beta fixes a bug that caused certain network names to disable iPhone's WiFi
Chance Miller / 9to5Mac :
Context & Ripple Effects
Three weeks after a researcher showed that joining a network named “%p%s%s%s%s%n” permanently disabled an iPhone's WiFi until network settings were reset, Apple has shipped the fix in the iOS 14.7 beta rather than waiting for a public release. The bug was pure string-parsing: format-specifier characters in an SSID were being interpreted by the OS instead of treated as plain text.
The episode fits a long tail of wireless-stack defects Apple has patched at the OS level, from the watchOS 4.0.1 Wi-Fi bug that broke LTE handoff in 2017 to the router MAC-address leak fixed two years later even in Lockdown Mode.
First-order effects
- iPhone owners who joined a hostile SSID get a supported recovery path — upgrading replaces the reset-network-settings workaround that was previously the only cure.
- Anyone can still weaponize the string against pre-14.7 devices, since the fix lives first in a beta most users don't run.
Second-order effects
- The bug turns any open hotspot into a potential denial-of-service trap, giving venue and enterprise network operators a reason to audit their SSID naming and push fleet-wide iOS updates faster.
- Security researchers get confirmation that responsible disclosure of obscure parser bugs reaches Apple's shipping code within weeks, which feeds more such reports.
Third-order effects
- If the pattern holds, SSIDs and similar attacker-controlled strings stay a standing attack surface for smartphones, pushing OS vendors toward stricter input sanitization in wireless stacks and faster patch distribution beyond the beta channel.
The trend: Smartphone wireless stacks are becoming a recurring target for trivially triggerable remote bugs, with patch speed — not just discovery — deciding user exposure.