Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Binary-searching into CVMServer

theori.io | vulnerability | #macos | #exploit | #cve-2022-26721 | #cvmserver | #uninitialized-memory | #binary-search

Summary

CVE-2022-26721: a macOS CVMServer uninitialized-memory flaw found while diffing the CVE-2021-30724 patch, exploited via heap shaping, binary-search memory probing and dyld private-memory abuse.
Published
Collected

original ↗

Related coverage

  1. Exploiting Safari’s ANGLE Component (theori.io)
  2. Patch Analysis of CVE-2016–0189 (theori.io)
  3. ControlPlane Local Privilege Escalation Vulnerability on macOS (blog.quarkslab.com)
  4. CCleaner Local Privilege Escalation Vulnerability on macOS (blog.quarkslab.com)
  5. If You Can't Break Crypto, Break the Client: Recovery of Plaintext iMessage Data (bishopfox.com)
  6. CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap (yeswehack.com)

back