CVE-2022-26763 PoC — Apple TV 缓冲区错误漏洞

Source

Associated Vulnerability

Title:Apple TV 缓冲区错误漏洞 (CVE-2022-26763)
Description:Apple TV 4K和Apple TV HD都是美国苹果（Apple）公司的产品。Apple TV 4K是一款智能机顶盒。用于推出 4K Hdr 图像。Apple TV HD是一款高清电视机顶盒产品。 Apple TV 4K、Apple TV 4K（第 2 代）和 Apple TV HD 存在缓冲区错误漏洞，该漏洞源于DriverKit 中的边界错误。本地应用程序可以利用该漏洞使用系统权限执行任意代码。

Description

PCIDriverKit proof-of-concept for CVE-2022-26763

File Snapshot


 [4.0K]  /data/pocs/2bfb17602d7385aee3d1dde963fabe7db8ada41c
├── [ 182]  build_pcicrash_userclient.sh
├── [ 455]  eee.sh
├── [4.0K]  PCICrash
│   ├── [ 730]  Info.plist
│   ├── [3.4K]  PCICrash.cpp
│   ├── [ 479]  PCICrash.entitlements
│   └── [ 487]  PCICrash.iig
├── [4.0K]  PCICrashApp
│   ├── [ 179]  AppDelegate.h
│   ├── [ 529]  AppDelegate.m
│   ├── [4.0K]  Assets.xcassets
│   │   ├── [4.0K]  AccentColor.colorset
│   │   │   └── [ 123]  Contents.json
│   │   ├── [4.0K]  AppIcon.appiconset
│   │   │   └── [ 904]  Contents.json
│   │   └── [  63]  Contents.json
│   ├── [4.0K]  Base.lproj
│   │   └── [ 59K]  Main.storyboard
│   ├── [1.5K]  main.m
│   ├── [ 394]  PCICrashApp.entitlements
│   ├── [ 169]  ViewController.h
│   └── [ 416]  ViewController.m
├── [ 342]  pcicrash_userclient.entitlements
├── [ 691]  pcicrash_userclient.m
└── [4.0K]  PCICrash.xcodeproj
    ├── [ 22K]  project.pbxproj
    ├── [4.0K]  project.xcworkspace
    │   ├── [ 135]  contents.xcworkspacedata
    │   └── [4.0K]  xcshareddata
    │       └── [ 238]  IDEWorkspaceChecks.plist
    └── [4.0K]  xcuserdata
        └── [4.0K]  zhuowei.xcuserdatad
            └── [4.0K]  xcschemes
                └── [ 605]  xcschememanagement.plist

12 directories, 22 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!