CVE-2021-30955 PoC — Apple iOS 和 iPadOS 竞争条件问题漏洞

Source

https://github.com/nickorlow/CVE-2021-30955-POC

Associated Vulnerability

Title: Apple iOS 和 iPadOS 竞争条件问题漏洞 (CVE-2021-30955)
Description:A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.

Description

Jake Jame's proof of concept wrapped into an iOS app for  CVE-2021-30955

Readme

# CVE-2021-30955 POC
Proof of concept (wrapped into an iOS app) for  CVE-2021-30955
All credit to Jake James. His POC code (used in this project) can be found [here](https://gist.github.com/jakeajames/37f72c58c775bfbdda3aa9575149a8aa).

### What is this?
This demonstrates CVE-2021-30955, an iOS bug which allows an app in userspace to gain kernel-level permissions. In order to demonstrate this, this POC crashes the kernel of an iOS device.

### Why?
This can (by someone other than me) be turned into an iOS Jailbreak (or something nasty like spyware). This repository was created in order to let people test the POC out on their own iDevices since Jake James only provided a C file.

### Attributions
All credit to Jake James. His POC code (used in this project) can be found [here](https://gist.github.com/jakeajames/37f72c58c775bfbdda3aa9575149a8aa).

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →