---
id: 4676
title: "Binary-searching into CVMServer"
source_domain: theori.io
source_url: "https://theori.io/blog/binary-searching-into-cvmserver"
published_at: "2022-06-16T15:00:00Z"
tags: ["macos", "exploit", "cve-2022-26721", "cvmserver", "uninitialized-memory", "binary-search"]
phying_url: "https://phying.com/item/4676"
lang: en
---

# Binary-searching into CVMServer

## Summary

CVE-2022-26721: a macOS CVMServer uninitialized-memory flaw found while diffing the CVE-2021-30724 patch, exploited via heap shaping, binary-search memory probing and dyld private-memory abuse.

## Intelligence Metadata

- **Sources:** theori.io
- **Published:** 2022-06-16T15:00:00Z
- **Original:** https://theori.io/blog/binary-searching-into-cvmserver
- **Phying News:** https://phying.com/item/4676