Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue was discovered in certain Apple products. Xcode before 9.2 is affected. The issue involves the "ld64" component. A buffer overflow allows remote attackers to execute arbitrary code via crafted source code.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
@robustus @ambimorph Like the Litecoin bug (and unlike the first Sprout bug—CVE-2017-7167), the bug was actually outside the ZKP and therefore invalid transactions were detectable in the public blockchain. ⤵️
Post summary
The tweet comments on the Sprout bug, indicating its location outside ZKP and that invalid transactions could be seen, but it does not mention exploits, patches, or active attacks.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apple | xcode | - | - | - |