3 ms·
They aren't. When you receive an MMS your iPhone runs code to save and display the content. From my understanding of the article, the code responsible for handl
by hellcow 10y ago
They aren't. When you receive an MMS your iPhone runs code to save and display the content. From my understanding of the article, the code responsible for handling an incoming MMS contains a critical security bug enabling attackers to hide instructions in MMS content capable of reading any memory on the iPhone, even memory stored outside the Messages sandbox (like your passwords).
- landr0id 10y agoThe bug is in the ImageIO library which would affect SpringBoard, Messages, Safari, and most other applications which process images. I don't understand how having code execution in either of these processes would give up that information unless you explicitly had texted that info.
- swsieber 10y agoIt's the fact that the code can read any memory, not just app memory, according to GP.
- landr0id 10y agoThat's now how sandboxing works. You'd need an additional bug to escape the sandbox.
- tinus_hn 10y agoI suppose the idea is that it leads to a full system compromise, which would include either direct access to items like wifi passwords or access to the system as you are inputting the passwords.