Apple Intel GPU Driver - Use-After-Free/Double-Delete due to bad Locking

/ This PoC file might look familiar; this bug is a trivial variant of CVE-2016-1744 Apple bug id 635599405. That report showed the bug in the unmapusermemory external methods; a variant also exists in the mapusermemory external methods. The intel graphics drivers have their own hash table type...

CVE-2016-1744

The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1743...

CVE-2016-1744

CVE-2016-1744 affects Apple OS X Intel Graphics Driver in the Graphics Drivers subsystem prior to 10.11.4. The vulnerability allows a crafted app to execute arbitrary code in a privileged (kernel) context or trigger memory corruption leading to a denial of service. Root cause described in the sou...

CVE-2016-1744

creationtimestamp| type| source ---|---|--- 2016-03-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39616...