Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529

projectzero.google | research | CVE-2024-54529 | #exploitation | #macos | #type-confusion | #google-project-zero | #cve-2024-54529 | #coreaudiod

Summary

Part two of a Google Project Zero macOS series, exploiting the CVE-2024-54529 type confusion vulnerability in the coreaudiod daemon found via knowledge-driven fuzzing.
CVE
CVE-2024-54529
Published
Collected

original ↗

Related coverage

blog · projectzero.google
One Perfect Bug: Exploiting Type Confusion in Flash
A Google Project Zero analysis of a high-quality Flash type confusion bug and the factors that make it especially reliable for exploit development.
research · projectzero.google
A Deep Dive into the GetProcessHandleFromHwnd API
A Google Project Zero deep dive into the Windows GetProcessHandleFromHwnd API and its security implications.
research · projectzero.google
Finding and exploiting ntpd vulnerabilities
A Google Project Zero guest post telling how one of the researchers found and exploited vulnerabilities in the ntpd network time server.
research · theori.io
Patch Gapping a Safari Type Confusion
A WebKit AudioWorklet type-confusion bug was fixed, yet new vulnerable iOS builds still shipped for weeks afterward; Theori details the root cause and a full exploit chain built around the patch gap.
research · swarm.ptsecurity.com
Daemon Ex Plist: LPE via MacOS Daemons
A deep dive into macOS launchd Agents and Daemons: plist loading mechanisms, directory trust levels, and a defect the author used to demonstrate a local privilege escalation (LPE) vulnerability.
research · blog.quarkslab.com
Exploiting Microsoft Teams on macOS during a Purple Team engagement
During a Purple Team engagement Quarkslab identified a flaw in Microsoft Teams for macOS allowing an attacker to capture the victim's camera and microphone streams; a PoC led to a fix from MSRC.
back