For more detailed technical explanations of the bug, see posts here and here, and the Twitter thread here. The caveats As noted earlier, there are several requirements and constraints that significantly raise the bar for Rashid’s attack to work in real-world uses by an adversary.

Read full article on Technology Lab – Ars Technica