Browsing the "XNU" Tag

XNU VM Copy-On-Write Bypass

January 18th, 2023 | ๐Ÿ•’

iSpeechXNU VM suffers from a copy-on-write bypass vulnerability due to incorrect shadow creation logic used during unaligned vm_map_copy operations. Source


XNU Dangling PTE Entry

November 26th, 2022 | ๐Ÿ•’

Powered by iSpeechXNU suffers from a dangling PTE entry due to integer truncation when collapsing vm_object shadow chains. Source link


XNU inm_merge Heap Use-After-Free – Torchsec

January 7th, 2022 | ๐Ÿ•’

https://www.ispeech.org XNU: heap-use-after-free in inm_merge VULNERABILITY DETAILSbsd/netinet/in_mcast.c:```intinp_join_group(struct inpcb *inp, struct sockopt *sopt){...]if (is_new) {if (imo->imo_num_memberships == imo->imo_max_memberships) {error = imo_grow(imo,