An attacker can send a specially crafted iMessage to a vulnerable Apple iOS device, resulting in remote data access. This leads to privacy risks, such as having  your photos, text messages, etc leaked on the public internet, we advise to patch your iOS device(s) now.

The issue is caused by the _NSDataFileBackedFuture class which can be deserialized even if secure encoding is enabled leading to two major problems:

-        Arbitrary access to local files is allowed if the code deserializing the buffer shares memory with it.

-        An NSData object can be created with a length mismatch with the length of its byte array, leading to remote reads (and potentially write operations).

These actions could lead, for example to the SMS database or binary files (like images) to be exfiltrated without user interaction.