BBX Logo Beta

23pds: The iOS worse_query vulnerability poses a sandbox escape risk; users should be wary of wallet mnemonic phrase leaks.

--

SlowMist's Chief Information Security Officer, 23pds, stated that the iOS worse_query vulnerability is a container sandbox escape. This vulnerability breaks the isolation mechanism between apps, and after running a malicious IPA file, the application can read other app containers. If the wallet stores the mnemonic phrase, keystore, and WebView cache in plaintext, there is a risk of it being read. 23pds recommends that users upgrade their system to the latest version and avoid installing applications from unknown sources.

Loading...