”Another interesting question about NSKeyedArchiver serialization is what happens if a serialized object contains a cycle. […] We looked for vulnerabilities involving cycles and found two such bugs. The first is CVE-2019-8641, which we are not yet disclosing, because its fix did not fully remediate the issue”
4 comments
[ 3.5 ms ] story [ 23.5 ms ] thread”Another interesting question about NSKeyedArchiver serialization is what happens if a serialized object contains a cycle. […] We looked for vulnerabilities involving cycles and found two such bugs. The first is CVE-2019-8641, which we are not yet disclosing, because its fix did not fully remediate the issue”