The Many Possibilities of iMessage File Vulnerability
Pretty wild!Serialization bugs are the worst, since receiving weird, untrusted data happens all the time. People think this is about Java and class names and stuff, but it's really about receiving multimedia and decoding it in a performant way.When will people discover all the vulnerabilities in video codecs, fonts and shaders?