CVE-2015-7108
macOS X < 10.11.2 - Memory Corruption via Bluetooth HCI Interface
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-7108. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit leverages a lack of bounds checking in IOBluetoothHCIUserClient's external method dispatching to achieve arbitrary kernel code execution by manipulating memory between checks. It targets a time-of-check to time-of-use (TOCTOU) vulnerability in macOS El Capitan 10.11.
Description
The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Exploits (1)
This exploit leverages a lack of bounds checking in IOBluetoothHCIUserClient's external method dispatching to achieve arbitrary kernel code execution by manipulating memory between checks. It targets a time-of-check to time-of-use (TOCTOU) vulnerability in macOS El Capitan 10.11.