Apple macOS - Local Privilege Escalation Vulnerability(CVE-2017-6978)

HIServices.framework is used by a handful of deamons and implements its own CFObject serialization mechanism. The entrypoint to the deserialization code is AXUnserializeCFType; it reads a type field and uses that to index an array of function pointers for the support types: const:0000000000053ED0...