alt Hacker NewsWhat's with iOS and pdfs pwning them? Reminds me of the ForcedEntry in Pegasus.
https://projectzero.google/2022/03/forcedentry-sandbox-escap...
https://www.trendmicro.com/en_gb/research/21/i/analyzing-peg...
Replies
NetMageSCW • today at 6:10 PM
Never mind - that only applied to origins PDF 1.x.
motoboi • today at 5:15 PM
Too huge attack surface. Good candidate for victim trust (who would not open a pdf file on an iPhone?).
So pdf and images are the best vector for iPhones.
Once you escape the parser you have to reach and escape the sandbox and from there reach the kernel.
➕ show 1 reply
bushbaba • today at 5:49 PM
Maybe with LLMs a full rewrite that’s more secure could be done
➕ show 2 replies
mahboi • today at 5:16 PM
Well it was TIFF one time
PDF has been an entry point since forever, it is extremely complex and can in some cases even run javascript, it has a huge attack surface.