1 matches found
iMessage - NSKeyedUnarchiver Deserialization Allows file Backed NSData Objects
The class NSDataFileBackedFuture can be deserialized even if secure encoding is enabled. This class is a file-backed NSData object that loads a local file into memory when the NSData bytes selector is called. This presents two problems. First, it could potentially allow undesired access to local...
7.5CVSS7.8AI score0.11029EPSS
SaveExploits2
20