Search the Community
Showing results for tags 'nskeyedunarchiver'.
-
NSKeyedUnarchiver suffers from an information leak when decoding the SGBigUTF8String class using [SGBigUTF8String initWithCoder:]. This class initializes the string using [SGBigUTF8String initWithUTF8DataNullTerminated:] even though there is no guarantee the bytes provided to the decoder are null terminated. It should use [SGBigUTF8String initWithUTF8Data:] instead. View the full article
-
- nskeyedunarchiver
- sgbigutf8string
-
(and 3 more)
Tagged with:
-
Exploits iMessage NSKeyedUnarchiver Deserialization
1337day-Exploits posted a topic in Updated Exploits
iMessage suffers from a vulnerability where NSKeyedUnarchiver deserialization allows file backed NSData objects. View the full article-
- imessage
- nskeyedunarchiver
-
(and 1 more)
Tagged with:
-
Exploits NSKeyedUnarchiver ObjC Object Use-After-Free
1337day-Exploits posted a topic in Updated Exploits
NSKeyedUnarchiver suffers from a use-after-free vulnerability with ObjC objects when unarchiving OITSUIntDictionary instances even if secureCoding is required. View the full article-
- nskeyedunarchiver
- objc
-
(and 2 more)
Tagged with: