iOS 12.4.2

support.apple.com

2 points0x03 comments

This is interesting because Apple rarely, almost never, releases updates for old iOS versions, so this Foundation security bug must be quite severe.

Probably an as yet unannounced Messages flaw.

Sort-of. It’s in NSKeyedArchiver, and iMessage calls it. https://googleprojectzero.blogspot.com/2019/08/the-fully-rem... (Found via https://googleprojectzero.blogspot.com/search?q=8641):

”Another interesting question about NSKeyedArchiver serialization is what happens if a serialized object contains a cycle. […] We looked for vulnerabilities involving cycles and found two such bugs. The first is CVE-2019-8641, which we are not yet disclosing, because its fix did not fully remediate the issue”

Reply on news.ycombinator.com