CVE-2019-8646 2

Vulnerability (CVE)

The Many Possibilities of CVE-2019-8646

Project Zero's Natalie Silvanovich reported CVE-2019-8646, an iMessage flaw introduced in iOS 12.1 in which the unsafe class _NSDataFileBackedFuture can be deserialized remotely, letting an attacker read files and leak memory. She chained it with the...

Vulnerabilities & Patching

Remote iPhone Exploitation Part 1: Poking Memory via iMessage and CVE-2019-8641

Cyber Risks Google Project Zero

Project Zero's Samuel Groß detailed CVE-2019-8641, an iMessage vulnerability on iOS 12.4 that let an attacker holding only a target's Apple ID gain remote control of the device within minutes, with no user interaction and no on-screen indicator. Reported...

Vulnerabilities & Patching