Exploitation Summary
CVE-2019-8605 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 27, 2022. EIP tracks 4 public exploits from researchers including Google Security Research, Umang Raghuvanshi, 1nteger-c.
AI-analyzed exploit summary This exploit demonstrates a use-after-free vulnerability in the macOS kernel (CVE-2019-8605) due to improper handling of IPv6 socket options. The PoC triggers a kernel panic by reusing freed memory in the `in6_pcbdetach` function.
Description
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.
Exploits (4)
This exploit demonstrates a use-after-free vulnerability in the macOS kernel (CVE-2019-8605) due to improper handling of IPv6 socket options. The PoC triggers a kernel panic by reusing freed memory in the `in6_pcbdetach` function.
This is a complete exploit for CVE-2019-8605, targeting iOS versions 11.0 to 12.4. The exploit is implemented in SockPuppet3.cpp and has been verified in production multiple times.
This is a working proof-of-concept exploit for CVE-2019-8605, targeting a use-after-free vulnerability in the IOSurface framework on iOS. The exploit leverages kernel memory corruption to achieve local privilege escalation (LPE) by manipulating kernel structures and ultimately gaining root access.
This repository contains a functional kernel exploit for iOS 12-12.2 and 12.4, leveraging a use-after-free vulnerability in the socket handling code. The exploit includes detailed implementation for memory manipulation and privilege escalation.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H