The Patching Friars' AlmanacA calendar of CVE saints

September 13

FORCEDENTRYHoly card for forcedentry, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 GIF? PDF FORCEDENTRY IANUA EFFRACTA
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint FORCEDENTRY, Who Forced the Door With a PDF

Patron of iPhones, GIF files that weren't GIFs, and everyone who never opens suspicious attachments but gets hit anyway.

Life

On 13 September 2021 the Citizen Lab revealed FORCEDENTRY, a zero-click exploit that installed NSO Group's Pegasus spyware on iPhones. A file disguised as a GIF, actually a malformed PDF, exploited an integer overflow in the iMessage rendering engine: just receiving it was enough. Apple published an emergency update, and the affair fed the lawsuits against NSO.

Prayer

O Saint FORCEDENTRY, who forces the lock with an attachment never opened, let our decoders never trust what the extension promises. Amen.

How to celebrate

Celebrated by updating iOS when the patch ships and, for those at risk, turning on Lockdown Mode.

Attachment received, door already forced.

Technical record

Disclosed on
September 13 2021
CVE
CVE-2021-30860
CVSS
7.8Actively exploited (CISA KEV)
Product
Apple · macOS

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Sources: citizenlab.ca

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.