3 ms·
Probably an as yet unannounced Messages flaw.
by baggy_trough 7y ago
Probably an as yet unannounced Messages flaw.
- Someone 7y agoSort-of. It’s in NSKeyedArchiver, and iMessage calls it. https://googleprojectzero.blogspot.com/2019/08/the-fully-remote-attack-surface-of.html https://googleprojectzero.blogspot.com/2019/08/the-fully-rem... (Found via https://googleprojectzero.blogspot.com/search?q=8641 https://googleprojectzero.blogspot.com/search?q=8641): ”Another interesting question about NSKeyedArchiver serialization is what happens if a serialized object contains a cycle. […] We looked for vulnerabilities involving cycles and found two such bugs. The first is CVE-2019-8641, which we are not yet disclosing, because its fix did not fully remediate the issue”