Tag: vulnerability-research

• CVE-2019-8605: From UAF to TFP0

  2021-02-04

  From use-after-free to kernel task port: a full exploit walkthrough of CVE-2019-8605, with the heap spraying and Mach ool-message tricks that turn a socket UAF into TFP0.

• CVE-2020-27950: Kernel Memory Leak via an Uninitialized Mach Message Trailer

  2021-02-03

  A root-cause analysis of CVE-2020-27950, an iOS kernel memory leak from an uninitialized Mach message trailer, including the full PoC send and receive flow.