CVE-2016-1825

This repository contains a functional exploit for CVE-2016-1825, targeting macOS up to 10.12.1. It leverages a logic bug in IOHIDevice to achieve local privilege escalation (LPE) via arbitrary physical memory read/write operations.

physmem is a physical memory inspection tool and local privilege escalation exploit targeting macOS up to 10.12.1. It exploits CVE-2016-1825 or CVE-2016-7617, both logic bugs in IOKit registry properties, allowing arbitrary physical memory read/write and root shell execution.