CVE-2014-8835

Apple macOS X < 10.10.2 - Remote Code Execution via XPC Type Confusion in libxpc

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2014-8835. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit targets CVE-2024-8835, a vulnerability in OS X's sysmond daemon, allowing arbitrary code execution via XPC message manipulation. The PoC leverages controlled xpc_data objects to trigger unsafe memory operations, leading to potential privilege escalation.

Description

The xpc_data_get_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes key has the xpc_data data type, which allows attackers to execute arbitrary code by providing a crafted dictionary to sysmond, related to an "XPC type confusion" issue.

Exploits (1)

exploitdb WORKING POC
by Google Security Research · clocalosx
https://www.exploit-db.com/exploits/35742

This exploit targets CVE-2024-8835, a vulnerability in OS X's sysmond daemon, allowing arbitrary code execution via XPC message manipulation. The PoC leverages controlled xpc_data objects to trigger unsafe memory operations, leading to potential privilege escalation.

Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Complex
Reliability
Reliable
Target: Apple OS X 10.9.5 (sysmond daemon)
No auth needed
Prerequisites: Access to a vulnerable OS X system · Compilation with liblorgnette
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1031650
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/35742/
Vendor Advisory x_refsource_confirm
http://support.apple.com/HT204244
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/71992
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/100530
Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html

Scores

EPSS 0.3542
EPSS Percentile 97.2%

Details

CWE
CWE-19
Status published
Products (2)
apple/mac_os_x 10.10.0
apple/mac_os_x 10.10.1
Published Jan 30, 2015
Tracked Since Feb 18, 2026