super-tart-vphone-writeup

최근 공개된 PCC 펌웨어의 VPHONE600AP 컴포넌트를 이용하여 가상 아이폰 환경 구축해보기 도움주신 고마운 분 dlevi309 가상 아이폰에서 터치 상호작용에 대한 아이디어 제공 khanhduytran0, 34306, asdfugil, verygenericname 가상 아이폰 구축하는데 기타 아이디어 제공 Cryptex, Device Activation, Ramdisk 부팅 관련 등등 ma4the, Mard, SwallowS 가상 아이폰 작동 테스트 동기 애플은 2024년 후반쯤에 클라우드 기반 AI 개인정보 보호를 위...

vphone-cli

English · 中文 · 日本語 · 한국어 vphone-cli 旧バージョンの vphone-cli 1.x をお探しの場合は、1.0.14 のリリースをご覧ください。 Apple Silicon Mac 上で仮想 iPhone を作成・実行します。vphone-cli は Apple の Virtualization.framework と PCC 研究用 VM 基盤を使用します。 バージョン 2.x では、以前 EXP として提供していた変更を含む、ファームウェアの完全なパッチセットを適用します。パッチ構成は選択できません。自己完結した VPhone.bundle...

pcc

PHP Secure Configuration Checker 현재 PHP 구성을 잠재적인 보안 결함에 대해 검사합니다. 웹서버에서 이 파일에 접근하거나 CLI에서 실행하기만 하면 됩니다. 저자 이 소프트웨어는 Ben Fuhrmannek, SektionEins GmbH가 php.ini 점검을 자동화하고 좀 더 즐거운 작업에 시간을 할애하기 위해 작성했습니다. 아이디어 쉬운 배포를 위한 단일 파일 각 보안 관련 ini 항목에 대한 간단한 테스트 몇 가지 추가 테스트 — 너무 복잡하지는 않음 PHP = 8.1과 호환 복잡하거나 과도하...

CVE-2026-43813

CVE-2026-43813 — CloudAttestation enforceEnvironment バイパス Apple が iOS 26.6 として出荷し、CloudAttestation.dylib 内で発見された PCC アテステーション入力検証バグのリバースエンジニアリング解析。 TL;DR PCC.ComputeNodeValidator.policy.getter は、 AttestationBundle プロトブフ内の未検証の darwinInit ディクショナリから com.apple.CloudAttestation.environment バイトを読み取り、...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: m68k: For mvme147 and mvme16x architectures, do not wipe the PCC timer configuration bits. Do not clear the timer 1 configuration bits when clearing the interrupt flag and counter overflow. As reported by Michael, “This result...

CVE-2026-89436

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write past pcc-sinf acpipccretrievebiosdata rejects SINF packages only when pcc-numsifr is strictly less than hkey-package.count, then unconditionally writes a trailing sentinel at...

CVE-2026-89436 platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[]

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write past pcc-sinf acpipccretrievebiosdata rejects SINF packages only when pcc-numsifr is strictly less than hkey-package.count, then unconditionally writes a trailing sentinel at...

CVE-2026-89436: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write past pcc-sinf acpipccretrievebiosdata rejects SINF packages only when pcc-numsifr is strictly less than hkey-package.count, then unconditionally writes a trailing sentinel at...

CVE-2026-64512

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN warning caused by field misuse The definition of reg-accesswidth changes depending on the reg-spaceid type. Type ACPIADRSPACEPLATFORMCOMM uses accesswidth to indicate the PCC region, which can result in...

CVE-2026-64372 cpufreq: pcc: fix use-after-free and double free in _OSC evaluation

In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls acpievaluateobject twice for the two-phase OSC negotiation. Between the two calls it freed output.pointer but left output.length unchanged...

CVE-2026-64372

Summary: CVE-2026-64372 affects the Linux kernel cpufreq/pcc OSC evaluation path. The defect arises in pcc_cpufreq_do_osc(), which calls acpi_evaluate_object() twice for the two‑phase _OSC negotiation. Between the calls, output.pointer is freed while output.length remains, causing the second call...

Linux Distros Unpatched Vulnerability : CVE-2026-64372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls acpievaluateobject twice for the two-phase OSC negotiation. Between the...

PT-2026-64593

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free and double free issue exists in the pcc cpufreq do osc function during the two-phase OSC negotiation. The function calls acpi evaluate object twice; however, after the...

CVE-2026-8251

A vulnerability was found in Open5GS up to 2.7.7. This impacts the function updateauthorizedpccruleandqos of the file /src/smf/npcf-handler.c of the component SMF. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-20685

An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3...

EUVD-2026-30775

An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3...

CVE-2026-20685: Improper Input Validation

An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3...

CVE-2026-8248

A vulnerability was detected in Open5GS up to 2.7.7. The affected element is the function updateauthorizedpccruleandqos of the file /src/smf/npcf-handler.c of the component SMF. The manipulation results in denial of service. The attack may be launched remotely. The exploit is now public and may b...

CVE-2026-8226

A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogspccruleinstallflowfrommedia in the library /lib/proto/types.c. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and...

EUVD-2026-29005

A vulnerability was found in Open5GS up to 2.7.7. This impacts the function updateauthorizedpccruleandqos of the file /src/smf/npcf-handler.c of the component SMF. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been made...