CVE-2019-8601
HIGHApple iCloud < 7.12 - Memory Corruption via Malicious Web Content
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-8601. PoCs published by BadAccess11.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2019-8601, a WebKit vulnerability involving an integer overflow in the DFG JIT compiler's `compileNewArrayWithSpread` function. The exploit demonstrates how to achieve arbitrary code execution by corrupting array butterflies to gain read/write primitives.
Description
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
Exploits (1)
This repository contains a proof-of-concept exploit for CVE-2019-8601, a WebKit vulnerability involving an integer overflow in the DFG JIT compiler's `compileNewArrayWithSpread` function. The exploit demonstrates how to achieve arbitrary code execution by corrupting array butterflies to gain read/write primitives.
References (8)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H