190 matches found
CVE-2025-31200
CVE-2025-31200: CoreAudio APAC通道重映射缓冲区溢出 漏洞概述 CVE-2025-31200 是 Apple CoreAudio 框架中的一个缓冲区溢出漏洞，影响 Apple 定位音频编解码器（APAC）解码器。该漏洞存在于 APACHOADecoder::DecodeAPACFrame 中的 APACChannelRemapper::Process 函数。 受影响系统： iOS 18.4.1 macOS 15.4.1 所有包含 CoreAudio 框架的 Apple 设备 技术细节 根本原因 该漏洞源于通道布局验证中的逻辑错误： 1...
iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201
CVE-2025-31200 y CVE-2025-31201 | Cadena RCE zero-click de iMessage Resumen Este repositorio documenta la investigación de una cadena de explotación remota zero-click que afecta a iOS 18.x y versiones posteriores. Un archivo de audio AMR malformado enviado a través de iMessage desencadena: 1...
apple-positional-audio-codec-invalid-header
针对CoreAudio补丁（CVE-2025-31200）的概念验证，该补丁位于iOS 18.4.1中。文章在此：https://blog.noahhw.dev/posts/cve-2025-31200/ 更新 2025/05/27 我已成功将其推进到 可控的 （即使不是任意）写操作。详细说明即将发布。不过，如果你想自行验证，需要在补丁发布前的 macOS 版本上构建： 15.4.1。你可以使用 check-mismatch lldb 钩子播放音频（使用一个简单的只是播放音频的测试工具）来观察写入操作。目前还不是一个很好的任意写入，原因如上所述——但主要是因为我还不能 100%...
OffensiveCon25 Conference Slides
OffensiveCon25 conference slides for topics Breaking the Sound Barrier: Exploiting CoreAudio via Mach Message Fuzzing, How Offensive Security Made Me Better at Defense, Finding and Exploiting 20-Year-Old Bugs in Web Browsers, and Entrysign: Create Your Own x86 Microcode for Fun and Profit...
Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of APAC...
About the security content of tvOS 26.3
About the security content of tvOS 26.3 This document describes the security content of tvOS 26.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of visionOS 26.3
About the security content of visionOS 26.3 This document describes the security content of visionOS 26.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
About the security content of macOS Sequoia 15.7.4
About the security content of macOS Sequoia 15.7.4 This document describes the security content of macOS Sequoia 15.7.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
About the security content of macOS Sonoma 14.8.4
About the security content of macOS Sonoma 14.8.4 This document describes the security content of macOS Sonoma 14.8.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...
About the security content of watchOS 26.3
About the security content of watchOS 26.3 This document describes the security content of watchOS 26.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...
EUVD-2010-0068
Malware in sbrugna...
EUVD-2011-3216
Malware in sbrugna...
EUVD-2017-16046
Malware in sbrugna...
EUVD-2017-11685
Malware in sbrugna...
EUVD-2007-3729
Malware in sbrugna...
EUVD-2010-0091
Malware in sbrugna...
EUVD-2007-3730
Malware in sbrugna...
EUVD-2007-3731
Malware in sbrugna...