EIP-2026-103366
PRE-CVEmacOS XNU - Copy-on-Write Behavior Bypass via Mount of User-Owned Filesystem Image
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103366. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit demonstrates a copy-on-write (CoW) vulnerability in macOS XNU kernel, where modifications to a mounted FAT filesystem image bypass virtual memory protections, allowing an attacker to alter memory mappings in another process. The PoC includes multiple components to trigger memory pressure and observe the inconsistency.
Description
macOS XNU - Copy-on-Write Behavior Bypass via Mount of User-Owned Filesystem Image
Exploits (1)
This exploit demonstrates a copy-on-write (CoW) vulnerability in macOS XNU kernel, where modifications to a mounted FAT filesystem image bypass virtual memory protections, allowing an attacker to alter memory mappings in another process. The PoC includes multiple components to trigger memory pressure and observe the inconsistency.