---
id: 8717
title: "[CVE-2017-2370] Exception-oriented exploitation on iOS"
cve: CVE-2017-2370
source_domain: projectzero.google
source_url: "https://projectzero.google/2017/04/exception-oriented-exploitation-on-ios.html"
published_at: "2017-04-18T00:00:00Z"
tags: ["exploitation", "ios", "kernel", "xnu", "heap-overflow", "project-zero", "cve-2017-2370"]
phying_url: "https://phying.com/item/8717"
lang: en
---

# [CVE-2017-2370] Exception-oriented exploitation on iOS

## Summary

A Project Zero write-up on discovering and exploiting CVE-2017-2370, a heap buffer overflow in an iOS mach trap, using deliberate crashes to build a working exploit.

## Intelligence Metadata

- **Sources:** projectzero.google
- **CVE:** CVE-2017-2370
- **Published:** 2017-04-18T00:00:00Z
- **Original:** https://projectzero.google/2017/04/exception-oriented-exploitation-on-ios.html
- **Phying News:** https://phying.com/item/8717