Lucene search
+L

1 matches found

Exploit DB
Exploit DB
added 2019/07/30 12:0 a.m.225 views

macOS / iOS NSKeyedUnarchiver - Use-After-Free of ObjC Objects when Unarchiving OITSUIntDictionary Instances

When deserializing NSObjects with the NSArchiver API 1, one can supply a whitelist of classes that are allowed to be unarchived. In that case, any object in the archive whose class is not whitelisted will not be deserialized. Doing so will also cause the NSKeyedUnarchiver to "requireSecureCoding"...

9.8CVSS7.9AI score0.09776EPSS
SaveExploits4
Rows per page
Query Builder