CVE-2020-9768 PoC — 多款Apple产品Image Processing组件资源管理错误漏洞

Source

https://github.com/XorgX304/CVE-2020-9768

Associated Vulnerability

Title:多款Apple产品Image Processing组件资源管理错误漏洞 (CVE-2020-9768)
Description:Apple iOS等都是美国苹果（Apple）公司的产品。Apple iOS是一套为移动设备所开发的操作系统。Apple tvOS是一套智能电视操作系统。Apple iPadOS是一套用于iPad平板电脑的操作系统。Image Processing是其中的一个图片处理组件。多款Apple产品中的Image Processing组件存在资源管理错误漏洞。攻击者可利用该漏洞以系统权限执行任意代码。以下产品及版本受到影响：Apple iOS 13.4之前版本；iPadOS 13.4之前版本；tvOS 13.4

Description

AppleJPEGDriverUserClient : mach port use-after-free/type-confusion via race condition

File Snapshot


 None

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!