Locked Exploits NSKeyedUnarchiver SGBigUTF8String Decoding Information Leak

[1337day-Exploits]

NSKeyedUnarchiver suffers from an information leak when decoding the SGBigUTF8String class using [SGBigUTF8String initWithCoder:]. This class initializes the string using [SGBigUTF8String initWithUTF8DataNullTerminated:] even though there is no guarantee the bytes provided to the decoder are null terminated. It should use [SGBigUTF8String initWithUTF8Data:] instead.

This is the hidden content, please

• Sign In
• or
• Sign Up