Google Researchers Disclose PoCs for 4 Remotely Exploitable iOS Flaws

🗓️ 30 Jul 2019 11:21:00Reported by The Hacker NewsType

Google's researchers reveal PoCs for 4 serious iMessage vulnerabilities allowing remote code execution and file access on iOS device

Reporter	Title	Published	Views	Family All 105
0day.today	Apple iMessage - DigitalTouch tap Message Processing Out-of-Bounds Read Exploit	24 Jul 201900:00	–	zdt
0day.today	macOS / iOS NSKeyedUnarchiver - Use-After-Free of ObjC Objects when Unarchiving OITSUIntDictionary I	30 Jul 201900:00	–	zdt
0day.today	iMessage - Memory Corruption when Decoding NSKnownKeysDictionary1 Exploit	30 Jul 201900:00	–	zdt
0day.today	iMessage - NSArray Deserialization can Invoke Subclass that does not Retain References Exploit	30 Jul 201900:00	–	zdt
0day.today	iMessage - NSKeyedUnarchiver Deserialization Allows file Backed NSData Objects Exploit	30 Jul 201900:00	–	zdt
0day.today	iMessage - Decoding NSSharedKeyDictionary Can Read Object Out of Bounds Exploit	26 Sep 201900:00	–	zdt
0day.today	iMessage - Decoding NSSharedKeyDictionary can read ObjC Object at Attacker Controlled Address	11 Nov 201900:00	–	zdt
ATTACKERKB	CVE-2019-8646	18 Dec 201900:00	–	attackerkb
Apple	About the security content of macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra	22 Jul 201900:00	–	apple
Apple	About the security content of macOS Mojave 10.14.6 Supplemental Update 2, Security Update 2019-005 High Sierra, and Security Update 2019-005 Sierra	26 Sep 201900:00	–	apple

30 Jul 2019 11:21Current

2.5Low risk

Vulners AI Score2.5

CVSS 27.5

CVSS 3.19.8

EPSS0.16997