CVE-2015-7112

Apple iOS <9.2, macOS <10.11.2, tvOS <9.1, watchOS <2.1 - Memory Corruption in IOHIDFamily API

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-7112. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit demonstrates a double-free vulnerability in IOHIDEventQueue::start due to improper handling of queue reallocation. It requires root to create a fake HID device but can be triggered by an unprivileged user once set up.

Description

The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-7111.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · textdosmultiple

https://www.exploit-db.com/exploits/39379

View Code ZIP pw:eip

This exploit demonstrates a double-free vulnerability in IOHIDEventQueue::start due to improper handling of queue reallocation. It requires root to create a fake HID device but can be triggered by an unprivileged user once set up.

Classification

Working Poc 95%

Attack Type

Dos

Complexity

Complex

Reliability

Reliable

Target: Apple IOHIDFamily (macOS 10.10.5 and likely iOS)

Auth required

Prerequisites: Root access to create a fake HID device · Specific HID report descriptor with suitable size

MITRE ATT&CK