Skip to content
Patch Gapping a Safari Type Confusion
theori.io | research | #ios | #exploit | #type-confusion | #safari | #webkit | #audioworklet | #patch-gap
Summary
A WebKit AudioWorklet type-confusion bug was fixed, yet new vulnerable iOS builds still shipped for weeks afterward; Theori details the root cause and a full exploit chain built around the patch gap.
- Published
- Collected