3 ms·
Could this be an potential avenue for some sort of exploit? I had no idea that you could "execute" logic via fonts.
by mmazing 7y ago
Could this be an potential avenue for some sort of exploit? I had no idea that you could "execute" logic via fonts.
- Thorrez 7y agoPreviously bugs in how iOS with how it handles certain unicode combining characters meant that an attacker could crash someone's iPhone just by sending a text. I'm not sure if it was buggy logic in the font. https://news.ycombinator.com/item?id=16386444 https://news.ycombinator.com/item?id=16386444
- Animats 7y agoUh oh. Are fonts now Turing-complete?
- cperciva 7y agoYes: https://litherum.blogspot.com/2019/03/addition-font.html https://litherum.blogspot.com/2019/03/addition-font.html
- chatmasta 7y agoDefinitely. Project Zero had a multi-part series on this subject: https://googleprojectzero.blogspot.com/2015/07/one-font-vulnerability-to-rule-them-all.html https://googleprojectzero.blogspot.com/2015/07/one-font-vuln...