CVE-2022-26757

HIGH

iPadOS < 15.5 - Use-After-Free

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-26757. PoCs published by Dylbin.

AI-analyzed exploit summary This repository describes a race condition vulnerability (CVE-2022-26757) in iOS's flow divert PCB initialization, where a dangling pointer can lead to use-after-free. The issue was patched in iOS 15.5.

Description

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

Exploits (1)

nomisec WRITEUP 4 stars

by Dylbin · poc

https://github.com/Dylbin/flow_divert

View Code ZIP pw:eip

This repository describes a race condition vulnerability (CVE-2022-26757) in iOS's flow divert PCB initialization, where a dangling pointer can lead to use-after-free. The issue was patched in iOS 15.5.

Classification

Writeup 90%

Attack Type

Dos

Complexity

Complex

Reliability

Racy

Target: Apple iOS (versions prior to 15.5)

No auth needed

Prerequisites: Access to iOS 15.4 or earlier · Ability to trigger race condition via syscalls

MITRE ATT&CK