Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-30937. PoCs published by realrodri.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2021-30937, targeting iOS 15.0-15.1.1. The exploit leverages a bytecopy vulnerability in the multicast handling of the kernel, using techniques like heap spraying and kernel memory manipulation to achieve local privilege escalation.
Description
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to execute arbitrary code with kernel privileges.
Exploits (1)
This repository contains a functional exploit for CVE-2021-30937, targeting iOS 15.0-15.1.1. The exploit leverages a bytecopy vulnerability in the multicast handling of the kernel, using techniques like heap spraying and kernel memory manipulation to achieve local privilege escalation.
References (7)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H