CVE-2021-30955 PoC — Apple iOS 和 iPadOS 竞争条件问题漏洞

Source

https://github.com/markie-dev/desc_race_A15

Associated Vulnerability

Title: Apple iOS 和 iPadOS 竞争条件问题漏洞 (CVE-2021-30955)
Description:A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.

Description

CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM devices (A14-A15)

Readme

# desc_race_A15
CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM devices (A14-A15)

- Made with SwiftUI and C
- Based off of [@b1n4r1b01's](https://twitter.com/b1n4r1b01/status/1498641177498644481?cxt=HHwWgsCj6b6Nn8wpAAAA) exploit
- [Write-up](https://www.cyberkl.com/cvelist/cvedetail/24) of @realBrightiup's POC
- Improves A14-A15 support
- Tested on iPhone 13 Pro Max


![gif](src/vidforgif.gif)








# Results
- Achieves write privileges
- Panic's immediately due to A12+
- generates logs in `/Settings/Privacy/Analytics&Improvements/Analytics Data`





# Screenshots

<p float="left">
  <img src="src/light.png" width="300" />
  <img src="src/dark.png" width="300" /> 
  <img src="src/sc.png" width="100" />
</p>


# Credits
- @realBrightiup
- @b1n4r1b01
- @jakeashacks

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →