Summary
A newline in a source filename could escape the ARM command-line comment and add attacker-controlled instructions to the assembled object.
Technical analysis
The accompanying research article explains the finding, reproduction, and remediation status.
Read the technical write-upDisclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified