EIP-2026-103405

This exploit demonstrates an integer overflow vulnerability in IOHIDResourceQueue::enqueueReport, leading to kernel memory corruption. The PoC triggers the bug by passing a large IOMemoryDescriptor length (0xffffffff) to bypass size checks and cause an out-of-bounds write.