CVE-2015-7084
Apple iOS <9.2, macOS <10.11.2, tvOS <9.1, watchOS <2.1 - Memory Corruption in Kernel
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-7084. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit demonstrates a kernel race condition in IORegistryIterator::reset() on OS X, leading to use-after-free and RIP control via heap manipulation. It leverages OSUnserializeXML to place controlled data on the freelist, enabling arbitrary code execution in the kernel.
Description
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7083.
Exploits (2)
This exploit demonstrates a kernel race condition in IORegistryIterator::reset() on OS X, leading to use-after-free and RIP control via heap manipulation. It leverages OSUnserializeXML to place controlled data on the freelist, enabling arbitrary code execution in the kernel.
This exploit demonstrates a race condition in the IORegistryIteratorExitEntry function in OS X and iOS kernels, leading to a double-free vulnerability. The PoC uses multithreading to trigger the race condition, potentially causing kernel memory corruption.