CVE-2024-23222
HIGH KEViPadOS < 16.7.5 - Remote Code Execution via Type Confusion
Title source: llmExploitation Summary
CVE-2024-23222 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added January 23, 2024. EIP tracks 4 public exploits from researchers including Umit-MHL, Meysamshiralii, FuzzySecurity.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2024-23222, a WebKit type confusion vulnerability leading to a sandbox escape on iOS 16.4.1. The exploit chain includes a JSC JIT type confusion (Stage 1) and arbitrary native function calls (Stage 2), delivered via a single HTML page.
Description
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution. This fix associated with the Coruna exploit was shipped in iOS 17.3 on January 22, 2024. This update brings that fix to devices that cannot update to the latest iOS version.
Exploits (4)
This repository contains a functional exploit for CVE-2024-23222, a WebKit type confusion vulnerability leading to a sandbox escape on iOS 16.4.1. The exploit chain includes a JSC JIT type confusion (Stage 1) and arbitrary native function calls (Stage 2), delivered via a single HTML page.
The repository claims to analyze CVE-2024-23222 but lacks technical details about the vulnerability itself. Instead, it directs users to download an external installer, which is a common tactic for distributing malware or fake exploits.
This repository provides a detailed technical analysis of CVE-2024-23222, a TOCTOU race condition in WebKit's JavaScriptCore DFG JIT compiler, including root cause analysis, patch details, and an adaptation of the exploit to Linux x86_64.
This repository provides a detailed technical analysis and deobfuscation of the Coruna iOS Exploit Kit targeting CVE-2024-23222, a type confusion vulnerability in WebKit's JavaScriptCore. It includes architectural breakdowns, MITRE ATT&CK mappings, and deobfuscation methodologies but lacks functional exploit code.
References (25)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H