machscope

MachScope ネイティブなmacOSバイナリ解析ツール。Mach-Oパース、ARM64逆アセンブル、プロセスデバッグを提供します。完全にSwiftで構築され、外部依存関係はありません。 機能 機能| 説明 ---|--- Mach-Oパース| ヘッダー、セグメント、セクション、シンボル、ダイリブ、文字列 コード署名| 権限、CDHash、署名情報、チームID ARM64逆アセンブル| PAC注釈付きの完全な命令デコーダ プロセスデバッグ| アタッチ、ブレークポイント、メモリ、レジスタ Swiftライブラリ| 自身のプロジェクトに組み込み可能 JSON出力| スクリプトに適した出力形...

QuickHeal

QuickHeal Quick Heal Antivirus 向け CVE-2017-5005 アドバイザリ メモリ・バッファの境界 内における操作の不適切な制限 の脆弱性です。 このソフトウェアはメモリバッファに対して操作を行いますが、バッファの意図された境界の外にあるメモリ位置に対して読み取りまたは書き込みを行う可能性があります。 脆弱性の説明 Quick Heal Internet Security は、LCUNIXTHREAD.cmdsize（Mach-O ）の検証が不適切なため、スタックバッファ上の領域外書き込み（Out of Bound Write on Stack...

machofile

machofile machofile 是一个用于解析 Mach-O 二进制文件的模块，专注于恶意软件分析和逆向工程。 受 Ero Carrera 的 pefile 启发，本模块旨在为 Mach-O 二进制文件提供类似的功能。 用于获取文件格式知识、基本结构和常量的参考资料与文档均来自下面列出的资源。 machofile 是自包含的。该模块没有依赖；它与字节序无关；并且可在 macOS、Windows 和 Linux 上运行。 虽然市面上已有其他 Mach-O 解析模块，但开发本模块的动机是： 首先也是最重要的，对我而言这是深入了解 Mach-O 格式和结构的绝佳方式...

ipsw

ipsw iOS/macOS 研究瑞士军刀 ipsw 是一个用于 Apple 固件研究与逆向工程的命令行工具包。可下载并解包 IPSW 和 OTA，检查 Mach-O 二进制文件与 dyld 共享缓存，分析 kernelcache，并与连接的 iOS 设备进行交互。 Agent skill · 安装 · CLI 示例 · 文档 将 ipsw 与 AI agent 配合使用 如果你在 Claude Code、Codex、Gemini CLI 或其他支持 skills 的 agent 中工作，请从 ipsw-skill 开始。它为 agent 提供了用于固件提取、二进制分析和 Apple...

SUSE CVE-2026-20347

A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in Mach-...

Linux Distros Unpatched Vulnerability : CVE-2026-20347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded...

SUSE CVE-2026-31961

Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains an unbounded memory allocation vulnerability when parsing Mach-O binaries. Exploitation requires that Quill processes an attacker-supplied Mach-O binary, which is most likely in...

GO-2026-4675 Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing in github.com/anchore/quill

Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing in github.com/anchore/quill...

CVE-2026-31961

Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains an unbounded memory allocation vulnerability when parsing Mach-O binaries. Exploitation requires that Quill processes an attacker-supplied Mach-O binary, which is most likely in...

CVE-2026-31961 Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsing

Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains an unbounded memory allocation vulnerability when parsing Mach-O binaries. Exploitation requires that Quill processes an attacker-supplied Mach-O binary, which is most likely in...

GHSA-XJ69-M9QQ-8M94 Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing

Impact Quill before version v0.7.1 contains an unbounded memory allocation vulnerability when parsing Mach-O binaries. Exploitation requires that Quill processes an attacker-supplied Mach-O binary, which is most likely in environments such as CI/CD pipelines, shared signing services, or any...

USN-8080-1: YARA vulnerabilities

Kamil Frankowicz discovered that a number of YARA's functions generated memory exceptions when processing specially crafted rules or files. A remote attacker could possibly use these issues to cause YARA to crash, resulting in a denial of service. These issues only affected Ubuntu 16.04 LTS...

USN-8080-1 yara vulnerabilities

Kamil Frankowicz discovered that a number of YARA's functions generated memory exceptions when processing specially crafted rules or files. A remote attacker could possibly use these issues to cause YARA to crash, resulting in a denial of service. These issues only affected Ubuntu 16.04 LTS...

PT-2022-23137 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: Rizin versions 0.4.0 and prior Description: The issue is related to an out-of-bounds write when parsing Mach-O files. A user opening a malicious Mach-O file could be affected, allowing an attacker to execute code on the user's machine...