CVE-2017-2370

This is a detailed writeup explaining the exploitation of CVE-2017-2370, a heap overflow vulnerability in the `mach_voucher_extract_attr_recipe_trap` function in iOS 10 and macOS 10.12. It describes the vulnerability, heap feng shui techniques, and steps to achieve privilege escalation.

This is a kernel arbitrary read/write exploit for CVE-2017-2370 targeting iOS 10.2. It leverages a heap overflow in the mach_voucher_extract_attr_recipe_trap function to achieve local privilege escalation (LPE) on vulnerable iOS devices.

This is a kernel arbitrary read/write exploit for CVE-2017-2370 targeting iOS 10.2. It leverages a heap overflow in the `mach_voucher_extract_attr_recipe_trap` function to achieve privilege escalation via controlled kernel memory corruption.

This repository contains a kernel arbitrary read/write exploit for CVE-2017-2370, targeting iOS 10.2. The exploit leverages a heap overflow in the `mach_voucher_extract_attr_recipe_trap` function to achieve privilege escalation.

This exploit leverages a kernel heap overflow in the `mach_voucher_extract_attr_recipe_trap` function due to improper validation of user-controlled input, allowing arbitrary kernel read/write on macOS Sierra 10.12.1 and iOS 10.2.