Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-7083. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit leverages an integer overflow in the NECP system control socket packet parsing in macOS/iOS kernels, leading to a heap-based buffer overflow. It demonstrates a kernel memory corruption vulnerability by crafting malformed policy conditions in a NECP_PACKET_TYPE_POLICY_ADD packet.
Description
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7084.
Exploits (1)
This exploit leverages an integer overflow in the NECP system control socket packet parsing in macOS/iOS kernels, leading to a heap-based buffer overflow. It demonstrates a kernel memory corruption vulnerability by crafting malformed policy conditions in a NECP_PACKET_TYPE_POLICY_ADD packet.