4 ms·
The NSO exploit started by pretending to send a GIF, that was sent down to some decoder that did automatic file-type detection based on data rather than filetyp
by whizzter 5y ago
The NSO exploit started by pretending to send a GIF, that was sent down to some decoder that did automatic file-type detection based on data rather than filetype and "correctly" detected an PDF, the Apple PDF decoder in turn supports JBIG2 images where the actual exploit lives.