MacOS kernel memory disclosure due to lack of bounds checking in AppleIntelCapriController::getDisplayPipeCapability(CVE-2017-2489)

MacOS kernel memory disclosure due to lack of bounds checking in AppleIntelCapriController::getDisplayPipeCapability Selector 0x710 of IntelFBClientControl ends up in AppleIntelCapriController::getDisplayPipeCapability. This method takes a structure input and output buffer. It reads an attacker...

CVE-2017-2489

CVE-2017-2489 affects macOS Sierra prior to 10.12.4 and targets the Intel Graphics Driver. A crafted app could leak sensitive data from kernel memory due to a memory handling/validation vulnerability in the driver, enabling local information disclosure. Public mentions/traces show PoC/exploits ex...