PT-2020-11589

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue arises from the function abc pcie issue dma xfer sync creating a transfer object, adding it to the session object, and then continuing to work with it. A concurrent thread could retrieve the created transfe...

Over The Air - Vol. 2, Pt. 3: Exploiting The Wi-Fi Stack on Apple Devices

Posted by Gal Beniamini, Project Zero In this blog post we’ll complete our goal of achieving remote kernel code execution on the iPhone 7, by means of Wi-Fi communication alone. After developing a Wi-Fi firmware exploit in the previous blog post, we are left with the task of using our newly...