CVE-2019-8646

This exploit leverages a deserialization vulnerability in iOS's handling of _NSDataFileBackedFuture objects to perform out-of-bounds reads and leak memory from a remote device via iMessage. The PoC demonstrates file leakage by crafting malicious serialized objects that bypass URL scheme checks and exploit localization string handling.