Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-27815. PoCs published by jprx.
AI-analyzed exploit summary This PoC exploits a buffer overflow in the XNU kernel (CVE-2024-27815) by manipulating mbuf headers via a crafted socket operation. It demonstrates control over the m_hdr structure of subsequent mbufs, leading to potential kernel memory corruption.
Description
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel privileges.
Exploits (1)
This PoC exploits a buffer overflow in the XNU kernel (CVE-2024-27815) by manipulating mbuf headers via a crafted socket operation. It demonstrates control over the m_hdr structure of subsequent mbufs, leading to potential kernel memory corruption.
References (16)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H