Why can't Apple just sandbox the damn thing? Run the renderer in a VM, call it a day.
Or just spend a few billion tokens rewriting the whole chain in a memory safe language. This nonsense is inexcusable in 2026
loading story #50219575
I sincerely believe you need much more than one billion tokens to rewrite the entire PDF dependency stack in a memory safe language. I think you underestimate how many features PDF has.
I wish that Apple today was a little more like the Apple that ruthlessly murdered the floppy disc and Flash.
Firefox has been working on this and are making good headway over the last few years.
it offers just enough cover and deniability. Q.e.d this sub thread.
it's a feature. expect next exploit to also be pdf or image related.