CVE-2019-8852 PoC — Apple macOS Catalina 缓冲区错误漏洞

Source

https://github.com/pattern-f/CVE-2019-8852

Associated Vulnerability

Title: Apple macOS Catalina 缓冲区错误漏洞 (CVE-2019-8852)
Description:A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. An application may be able to execute arbitrary code with kernel privileges.

Description

PoC demo for CVE-2019-8852, a tfp0 bug.

Readme

# CVE-2019-8852

A tfp0 bug for macOS 10.15.1 and below.

# Warranty

**Use it on your own risk. This will make you macOS panic.** I build it for security researchers only.

# Current state

Just a PoC, convert the vulnerability to a useful UAF.

Tested on **macOS 10.14.6 (18G103)**, MacBook Pro with 16 GB RAM.

# Credits

* Almost everything starts from oob_timestamp: Brandon Azad (@_bazad)

# License

GPL-3.0 License

# Misc

my twitter [@pattern_F_](https://twitter.com/pattern_F_)

English is hard for me...

英语太难了...

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →