CVE-2022-26763

HIGH

iPadOS < 15.5 - Out-of-Bounds Access

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-26763. PoCs published by zhuowei.

AI-analyzed exploit summary This PoC exploits CVE-2022-26763, a vulnerability in Apple's PCIDriverKit, by performing unauthorized memory writes to PCI device registers. The code demonstrates arbitrary write operations via ConfigurationWrite32 and _MemoryAccess, which can lead to system crashes or privilege escalation.

Description

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious application may be able to execute arbitrary code with system privileges.

Exploits (1)

nomisec WORKING POC 37 stars

by zhuowei · poc

https://github.com/zhuowei/PCICrash

View Code ZIP pw:eip

This PoC exploits CVE-2022-26763, a vulnerability in Apple's PCIDriverKit, by performing unauthorized memory writes to PCI device registers. The code demonstrates arbitrary write operations via ConfigurationWrite32 and _MemoryAccess, which can lead to system crashes or privilege escalation.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: Apple macOS (PCIDriverKit)

No auth needed

Prerequisites: macOS system with vulnerable PCIDriverKit · Ability to load a malicious DriverKit extension

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →