Apple Xcode Mach-O Parser Flaw Lets Malicious Libraries Leak Memory and Crash Build Systems

A newly disclosed memory-safety flaw in Apple’s modern Mach-O archive parser could allow a malicious static library to crash Xcode build tooling or cause limited memory disclosure through build logs. The issue affects the parser used by Apple’s newer linker, ld-prime, as well as libtool, ranlib, and potentially dyldinfo in current Xcode and...