xpc-string-leak

xpc-string-leak xpc-string-leak est un exploit de preuve de concept pour une lecture mémoire hors limites dans libxpc. Cet exploit utilise la vulnérabilité pour lire de la mémoire tas hors limites depuis diagnosticd, un processus root non sandboxé avec l'attribut taskforpid-allow. La vulnérabilit...

Exploit for Out-of-bounds Read in Apple Iphone_Os

xpc-string-leak ================================================...

macOS/IOS: mach_msg doesn't copy memory in a certain case(CVE-2017-2456)

When sending ool memory via |machmsg| with |deallocate| flag or |MACHMSGVIRTUALCOPY| flag, |machmsg| performs moving the memory to the destination process instead of copying it. But it doesn't consider the memory entry object that could resurrect the moved memory. As a result, it could lead to a...

Apple macOS/IOS 10.12.2 (16C67) - 'mach_msg' Heap Overflow

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1083 When sending ool memory via |machmsg| with |deallocate| flag or |MACHMSGVIRTUALCOPY| flag, |machmsg| performs moving the memory to the destination process instead of copying it. But it doesn't consider the memory entry objec...