No one mentioned that libwebp, a library found in millions of apps, was a 0-day origin.

Incomplete information included in recent disclosures by Apple and Google reporting critical zero-day vulnerabilities under active exploitation in their products has created a “huge blindspot” that’s causing a large number of offerings from other developers to go unpatched, researchers said Thursday.

  • @LoveSausage@lemmygrad.ml
    1•9 months ago

    Damn that’s some clusterfuck. My tinfoil senses are tingling. The part on addressing chrome only instead of webp… Seems like a good way for securing pegasus success and at the same time keep plausible deniability