Patch Gapping a Safari Type Confusion
theori.io | research | #ios | #exploit | #type-confusion | #safari | #webkit | #audioworklet | #patch-gap
Summary
A WebKit AudioWorklet type-confusion bug was fixed, yet new vulnerable iOS builds still shipped for weeks afterward; Theori details the root cause and a full exploit chain built around the patch gap.
- Published
- Collected
--- id: 4678 title: "Patch Gapping a Safari Type Confusion" source_domain: theori.io source_url: "https://theori.io/blog/patch-gapping-a-safari-type-confusion" published_at: "2021-05-24T15:00:00Z" tags: ["ios", "exploit", "type-confusion", "safari", "webkit", "audioworklet", "patch-gap"] phying_url: "https://phying.com/item/4678" lang: en --- # Patch Gapping a Safari Type Confusion ## Summary A WebKit AudioWorklet type-confusion bug was fixed, yet new vulnerable iOS builds still shipped for weeks afterward; Theori details the root cause and a full exploit chain built around the patch gap. ## Intelligence Metadata - **Sources:** theori.io - **Published:** 2021-05-24T15:00:00Z - **Original:** https://theori.io/blog/patch-gapping-a-safari-type-confusion - **Phying News:** https://phying.com/item/4678