Unity discloses security vulnerability on versions 2017.1 and later

Larry Hryb, director of community (U) at Unity Technologies, said a security vulnerability was identified that affects games and applications built on Unity versions 2017.1 and later for Android, Windows, Linux, and macOS operating systems. “There is no evidence of any exploitation of the vulnerability, nor has there been any impact on users or customers,” Hryb said. “We have proactively provided fixes that address the vulnerability, and they are already available to all developers. The vulnerability was responsibly reported by the security researcher RyotaK, and we thank him for working with us.” Hryb added that key facts of the matter were: There is no evidence of any exploitation of the vulnerability nor has there been any impact on users or customers; Unity has worked in close collaboration with its platform partners who have taken further steps to secure their platforms and protect end users; Released games or applications using Unity 2017.1 or later for Windows, Android, macOS, or Linux may contain this vulnerability; Unity has released an update for each of the major and minor versions of the Unity Editor starting with Unity 2019.1, and; Unity has released a binary patcher to patch already-built applications dating back to 2017.1.