A deep dive into an #NSO zero-click #iMessage #exploit: Remote Code Execution

source: https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html

#JBIG2 doesn't have scripting capabilities, but when combined with a #vulnerability, it does have the ability to emulate circuits of arbitrary logic gates operating on arbitrary #memory. So why not just use that to build your own #computer architecture and script that!? That's exactly what this exploit does. Using over 70,000 segment commands defining logical bit operations, they define a small computer architecture with features such as registers and a full 64-bit adder and comparator which they use to search memory and perform arithmetic operations. It's not as fast as #Javascript, but it's fundamentally computationally equivalent.

#news #attack #hack #hacker #knowledge #iPhone #apple #software