CVE-2023-32434
HIGH KEViPadOS < 15.7.7 - Integer Overflow to Kernel Code Execution
Title source: llmExploitation Summary
CVE-2023-32434 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 23, 2023. EIP tracks 2 public exploits from researchers including alfiecg24, rkrakesh524.
AI-analyzed exploit summary Trigon is a deterministic kernel exploit for CVE-2023-32434, targeting iOS 13-15.7.6 on A9-A11 devices. It leverages an integer overflow in XNU's VM layer to achieve arbitrary physical address read/write primitives, bypassing page table restrictions.
Description
An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
Exploits (2)
Trigon is a deterministic kernel exploit for CVE-2023-32434, targeting iOS 13-15.7.6 on A9-A11 devices. It leverages an integer overflow in XNU's VM layer to achieve arbitrary physical address read/write primitives, bypassing page table restrictions.
This repository is a research-oriented documentation project focused on iOS kernel security and tfp0 access concepts. It emphasizes ethical, authorized research and does not contain exploit code or actionable steps for unauthorized access.
References (10)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H