Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-44285. PoCs published by slds1.
AI-analyzed exploit summary The PoC exploits a race condition in the IOSurfaceRoot IOKit service by spawning two threads that repeatedly call IOConnectCallMethod with a malformed serialized dictionary. This likely triggers a use-after-free or other memory corruption vulnerability in the kernel, leading to local privilege escalation (LPE).
Description
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. An app may be able to cause unexpected system termination or corrupt kernel memory.
Exploits (1)
The PoC exploits a race condition in the IOSurfaceRoot IOKit service by spawning two threads that repeatedly call IOConnectCallMethod with a malformed serialized dictionary. This likely triggers a use-after-free or other memory corruption vulnerability in the kernel, leading to local privilege escalation (LPE).
References (8)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H