POC-CVE-2018-4327-and-CVE-2018-4330

brokentooth CVE-2018-4327에 대한 POC 적어도 제 생각에는 그렇습니다. CVE-2018-4327과 CVE-2018-4330은 모두 @SparkZheng이 작성했지만 어떤 버그가 어떤 CVE에 해당하는지 명시되어 있지 않아서, 그가 먼저 설명한 이 버그를 가정하고 있습니다. Tested on iPhone 6S 11.3.1 Should work until 11.4 SpringBoard 및 일부 서비스에서 PCARM의 IP 레지스터 버전를 원하는 값으로 설정할 수 있습니다. 코드를 실행한 다음 설정의 블루투스...

toothfairy

toothfairy brokentooth（下記リンク）に関連しています。 brokentoothとは異なり、toothfairyはBluetoothメニューでボタンを押す必要がありません。 両方のCVEは@SparkZhengによって公開されましたが、POCがなかったため、学習目的でPOCを作成することにしました。 コードは完璧ではありませんが、目的は果たせます。 iPhone 6S 11.3.1でテスト済み。 11.4までは動作するはずです。 bluetoothdおよびその他のいくつかのサービスで、PC（ARM版のIPレジスタ）を任意の値に設定できます。...

kernel: wifi: iwlwifi: fix double-free bug

A vulnerability was found in the Linux kernel's iwlwifi driver, where the TLV PC register data being freed is not properly marked as NULL afterwards, resulting in a double-free issue. This could lead to memory corruption or crashes...

SUSE CVE-2024-26694

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix double-free bug The storage for the TLV PC register data wasn't done like all the other storage in the drv-fw area, which is cleared at the end of deallocation. Therefore, the freeing must also be done...

UBUNTU-CVE-2024-26694

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix double-free bug The storage for the TLV PC register data wasn't done like all the other storage in the drv-fw area, which is cleared at the end of deallocation. Therefore, the freeing must also be done...

CVE-2024-26694

CVE-2024-26694 affects the Linux kernel wifi iwlwifi driver. The vulnerability arises from improper handling of TLV PC register data: the data storage in drv->fw area is freed without clearing the pointer, risking a double-free if a subsequent free occurs (e.g., when a file load fails after pa...

CVE-2024-26694 wifi: iwlwifi: fix double-free bug

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix double-free bug The storage for the TLV PC register data wasn't done like all the other storage in the drv-fw area, which is cleared at the end of deallocation. Therefore, the freeing must also be done...

CVE-2024-26694: Double Free

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix double-free bug The storage for the TLV PC register data wasn't done like all the other storage in the drv-fw area, which is cleared at the end of deallocation. Therefore, the freeing must also be done...