Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

What about the last one? Code execution through turbojpeg.dll

Might be possible to share a picture through zoom and when zoom will attempt to render the picture it's gonna execute it?

Edit: nevermind looks like this CVE vulnerability only exists on ARM64 CPU, in optimized codepaths using neon instructions.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2201

https://www.openwall.com/lists/oss-security/2019/11/11/1



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: