Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← back | CVE Intelligence

CVE-2019-8605

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2019-8605.

Coverage Span
2019-12-10
Reports
1 related reports

Associated Reports & Timeline

1.
[CVE-2019-8605] SockPuppet: A Walkthrough of a Kernel Exploit for iOS 12.4
projectzero.google | vulnerability | | original ↗ | #ios | #cve | #kernel | #project-zero
In this post, we’ll look at CVE-2019-8605, a vulnerability in the iOS kernel and macOS for five years and how to exploit it to achieve arbitrary kernel read/write. This issue affected XNU as early as 2013, and was reported by me to Apple on March 2019. It was then patched in iOS 12.3 in May 2019 and I released the complete details including the exploit for iOS for analysis, named “SockPuppet,” in July 2019. It was then discovered that this issue regressed in iOS 12.4 and was later patched in iOS 12.4.1 in late August 2019.