CVE-2016-7637
HIGHiPhone OS < 10.2, macOS < 10.12.2, watchOS < 3.1.3 - Kernel Memory Corruption
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2016-7637. PoCs published by Google Security Research, martinpham, shaibow.
AI-analyzed exploit summary This PoC exploits a reference counting bug in macOS's Mach port handling (CVE-2016-7637), allowing a sandboxed process to manipulate another process's port names, potentially leading to privilege escalation or sandbox escape.
Description
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Exploits (4)
This PoC exploits a reference counting bug in macOS's Mach port handling (CVE-2016-7637), allowing a sandboxed process to manipulate another process's port names, potentially leading to privilege escalation or sandbox escape.
This exploit targets a race condition in the `set_dp_control_port` MIG method in macOS/iOS kernels, allowing root-to-kernel privilege escalation. The PoC demonstrates a race condition leading to a use-after-free or reference count manipulation, enabling arbitrary kernel memory manipulation.
This repository contains a functional exploit for CVE-2016-7637, targeting iOS 10.1.1. It includes kernel exploit code, sandbox escape mechanisms, and a root shell payload, demonstrating a local privilege escalation (LPE) vulnerability in the XNU kernel.
This repository contains a functional exploit for CVE-2016-7637, targeting iOS 10.1.1. It includes kernel exploit code, sandbox escape mechanisms, and a root shell payload, demonstrating a local privilege escalation (LPE) vulnerability in the XNU kernel.
References (7)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H