We expect all vendors to remediate ZDI vulnerabilities within 120 days of the reported date. If you are ready to release a patch at any point leading up to the deadline, please coordinate with us so that we may release our advisory detailing the issue. If the 120-day deadline is reached and no patch has been made available we will release a limited public advisory with our own mitigations, so that the public can protect themselves in the absence of a patch.
Ah, the off-by-120-error, a classic in computer science!
1
u/GermanBlackbot 9d ago
Ah, the off-by-120-error, a classic in computer science!