CVE-2024-54529

CVE-2024-54529 is a type-confusion vulnerability in macOS CoreAudio, exposed via the com.apple.audio.audiohald Mach service in coreaudiod. Project Zero details show an attack chain where a HALS_Object is fetched from the heap and dereferenced through an unchecked type assumption, enabling control...