3 ms·

iOS 12.4.2

• baggy_trough 7y ago
  Probably an as yet unannounced Messages flaw.
  • Someone 7y ago
    Sort-of. It’s in NSKeyedArchiver, and iMessage calls it. https://googleprojectzero.blogspot.com/2019/08/the-fully-remote-attack-surface-of.html https://googleprojectzero.blogspot.com/2019/08/the-fully-rem... (Found via https://googleprojectzero.blogspot.com/search?q=8641 https://googleprojectzero.blogspot.com/search?q=8641): ”Another interesting question about NSKeyedArchiver serialization is what happens if a serialized object contains a cycle. […] We looked for vulnerabilities involving cycles and found two such bugs. The first is CVE-2019-8641, which we are not yet disclosing, because its fix did not fully remediate the issue”
• 0x0 7y ago
  This is interesting because Apple rarely, almost never, releases updates for old iOS versions, so this Foundation security bug must be quite severe.
  • deleted 7y ago
    [deleted]